OS Security as a Science: Anticipatory Improvements Under Countermeasures

Search This Blog

February 28, 2012

PhD

Korkin how-to from Igor Korkin

Материалы для аспирантов

Для сведения аспирантам

Email This BlogThis!Share to X Share to Facebook Share to Pinterest

No comments:

Post a Comment

Newer Post Older Post Home

Subscribe to: Post Comments (Atom)

Hi!

Scientific research on Windows kernel security is what I do. Here you can find all the details about my research projects focused on memory forensics and hypervisor-based rootkits detection.
Here are my home page & resume.
Best
Igor Korkin ☻

Popular Posts

ALPChecker – Detecting Spoofing and Blinding Attacks by Anastasiia Kropova and Igor Korkin #HITB2023HKT #COMMSEC

In recent years, Windows OS has faced a surge in attacks exploiting kernel drivers, notably targeting AV and EDR systems. The vulnerable A...
Your Linux Passwords Are in Danger: MimiDove Meets the Challenge (lightning talk) by Svetlana Golub and Igor Korkin

GNOME desktop environment stores user’s credentials in process memory, which poses an obvious danger and needs to be fixed. The competitiv...
MemoryMonRWX: Detect Kernel-Mode Rootkits via Real-Time Logging & Controlling Memory Access

Modern malware and spyware platforms attack existing antivirus solutions and even Microsoft PatchGuard. To protect users and business syste...
AllMemPro: Hypervisor-Based Active Data Protection for Integrity and Confidentiality of Dynamically Allocated Memory in Windows Kernel

One of the main issues in the OS security is providing trusted code execution in an untrusted environment. During executing, kernel-mode dri...
MemoryRanger Prevents Hijacking FILE_OBJECT Structures in Windows Kernel

Windows OS kernel memory is one of the main targets of cyber-attacks. By launching such attacks, hackers are succeeding in process privilege...
(Windows) Kernel Hijacking Is Not an Option: MemoryRanger Comes to Rescue Again

The security of a computer system depends on OS kernel protection. It is crucial to reveal and inspect new attacks on kernel data, as these...
Divide et Impera: MemoryRanger Runs Drivers in Isolated Kernel Spaces

One of the main issues in the OS security is to provide trusted code execution in an untrusted environment. During executing, kernel-mode d...
Protected Process Light will be Protected – MemoryRanger Fills the Gap Again

Windows OS issued a newly updated security mechanism to prevent illegal access to the memory of critical processes as well as for Digital ...
Two Challenges of Stealthy Hypervisors Detection: Time Cheating and Data Fluctuations

Update 07/16/2015 - Best Paper Award This paper was selected as one of the best papers of the 10th ADFSL Conference 2015 conference.adfsl.o...
Cracking the Mystery of Stealthy Hypervisor aka Автореферат диссертации

Korkin, I., & Tanda S. (2017, May 15-16). Detect Kernel-Mode Rootkits via Real Time Logging & Controlling Memory Access . Paper pre...

List of Academic Databases and Search Engines

CiteSeerX
DeepDyve
IEEE Xplore
Science Direct
Scopus
Springer Link
Wiley Library

Total Pageviews

Watermark theme. Powered by Blogger.