linux-rootkit

commit 2281f6851f08c2ea82d956fc748b85cae870e2c8
parent c6072d71c641a576f79310da2d84f212b8c9ed54
Author: deurzen <m.deurzen@tum.de>
Date:   Mon,  8 Feb 2021 00:48:01 +0100

updates slides

Diffstat:
M
project/slides/presentation.tex
 | 
5
++---

1 file changed, 2 insertions(+), 3 deletions(-)
diff --git a/project/slides/presentation.tex b/project/slides/presentation.tex
@@ -56,11 +56,10 @@
 		\item Without altering the guest OS
 	\end{itemize}
 \pause
-    \item Memory allocation events can be intercepted from a
+    \item Memory allocation events can be intercepted
 \pause
     \item Going from there, LiveDM is able to create a memory map
 	\begin{itemize}
-		\item Monitor the runtime state of a system-level VM
 		\pause
 		\item This map includes type information!
 	\end{itemize}
@@ -89,7 +88,6 @@
   \begin{itemize}
     \item Stage 1 is comprised of...
     \begin{itemize}
-\pause
      \item ...intercepting a set of memory allocation/deallocation functions
 \pause
      \item ...retrieving the requested allocation size, as well as the return value
@@ -263,6 +261,7 @@
       type: struct task_struct *, size: 3776 B, addr: 0xffff9e65bb961d80, caller: ./kernel/fork.c:812
       type: struct fdtable *, size: 56 B, addr: 0xffff9e65bc7d7280, caller: ./fs/file.c:111
     \end{lstlisting}
+	RK-DATA <ADDRESS>
 \end{frame}
 
 \begin{frame}[fragile]{\insertsection}