OS Security as a Science: Anticipatory Improvements Under Countermeasures

Search This Blog

June 05, 2012

some useful links

McDermott Cybersecurity

x64 Kernel Privilege Escalation
64-bit Device Driver Development
Windows x64 Shellcode

opensc.ws

codemachine.com

contagiodump.blogspot.com

reconstructer.org/links.html

MoonSols

InfoSec Institute Resources

SecurityXploded Blog

Email This BlogThis!Share to X Share to Facebook Share to Pinterest

No comments:

Post a Comment

Newer Post Older Post Home

Subscribe to: Post Comments (Atom)

Hi!

Scientific research on Windows kernel security is what I do. Here you can find all the details about my research projects focused on memory forensics and hypervisor-based rootkits detection.
Here are my home page & resume.
Best
Igor Korkin ☻

Popular Posts

AllMemPro: Hypervisor-Based Active Data Protection for Integrity and Confidentiality of Dynamically Allocated Memory in Windows Kernel

One of the main issues in the OS security is providing trusted code execution in an untrusted environment. During executing, kernel-mode dri...
Protected Process Light will be Protected – MemoryRanger Fills the Gap Again

Windows OS issued a newly updated security mechanism to prevent illegal access to the memory of critical processes as well as for Digital ...
ALPChecker – Detecting Spoofing and Blinding Attacks by Anastasiia Kropova and Igor Korkin #HITB2023HKT #COMMSEC

In recent years, Windows OS has faced a surge in attacks exploiting kernel drivers, notably targeting AV and EDR systems. The vulnerable A...
MemoryRanger Prevents Hijacking FILE_OBJECT Structures in Windows Kernel

Windows OS kernel memory is one of the main targets of cyber-attacks. By launching such attacks, hackers are succeeding in process privilege...
Your Linux Passwords Are in Danger: MimiDove Meets the Challenge (lightning talk) by Svetlana Golub and Igor Korkin

GNOME desktop environment stores user’s credentials in process memory, which poses an obvious danger and needs to be fixed. The competitiv...
(Windows) Kernel Hijacking Is Not an Option: MemoryRanger Comes to Rescue Again

The security of a computer system depends on OS kernel protection. It is crucial to reveal and inspect new attacks on kernel data, as these...
Divide et Impera: MemoryRanger Runs Drivers in Isolated Kernel Spaces

One of the main issues in the OS security is to provide trusted code execution in an untrusted environment. During executing, kernel-mode d...
MemoryMonRWX: Detect Kernel-Mode Rootkits via Real-Time Logging & Controlling Memory Access

Modern malware and spyware platforms attack existing antivirus solutions and even Microsoft PatchGuard. To protect users and business syste...
Two Challenges of Stealthy Hypervisors Detection: Time Cheating and Data Fluctuations

Update 07/16/2015 - Best Paper Award This paper was selected as one of the best papers of the 10th ADFSL Conference 2015 conference.adfsl.o...
Windows NT 4.0 Full Free Source Code (912 MB)

Download link - password=2freax2 https://files.fm/f/u6e82v75 https://files.fm/u/rugpatfv https://files.fm/u/n8wjbtjd http://jmp.sh/v/NW...

List of Academic Databases and Search Engines

CiteSeerX
DeepDyve
IEEE Xplore
Science Direct
Scopus
Springer Link
Wiley Library

Total Pageviews

Watermark theme. Powered by Blogger.