linux-rootkit

Feature-rich interactive rootkit that targets Linux kernel 4.19, accompanied by a dynamic kernel memory analysis GDB plugin for in vivo introspection (e.g. using QEMU)
git clone git://git.deurzen.net/linux-rootkit
Log | Files | Refs

commit 4fb8533a73b2b241c00a0af5c2c08e2836b2e404
parent 7204638200b96cf7267993fec98aaa6ec3576e8e
Author: Tizian Leonhardt <tizianleonhardt@web.de>
Date:   Sat,  6 Feb 2021 21:19:20 +0100

Begin section 'Our approach'

Diffstat:
Mproject/slides/presentation.tex | 21+++++++++++++++++++--
1 file changed, 19 insertions(+), 2 deletions(-)

diff --git a/project/slides/presentation.tex b/project/slides/presentation.tex @@ -47,9 +47,9 @@ \framesubtitle{LiveDM - Overview} \begin{itemize} - \item LiveDM seeks to overcome the previous issues + \item LiveDM seeks to overcome the previous issues through Virtual Machine Introspection \pause - \item Memory allocation events can be intercepted + \item Memory allocation events can be intercepted from a \pause \item Going from there, LiveDM is able to create a memory map \pause @@ -137,6 +137,23 @@ \end{itemize} \end{frame} +%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% +\section{Our Approach} +%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%% +\begin{frame}{\insertsection} + \framesubtitle{VMM} + + \begin{itemize} + \item Since introspection techniques are required, we need a VMM +\pause + \begin{itemize} + \item Xen + \item KVM + \item QEMU (our pick) + \item .. + \end{itemize} + \end{itemize} +\end{frame} %%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%%