The security of a computer system depends on OS kernel protection. It is crucial to reveal and inspect new attacks on kernel data, as these are used by hackers. The purpose of this paper is to continue research into attacks on dynamically allocated data in the Windows OS kernel and demonstrate the capacity of MemoryRanger to prevent these attacks. This paper discusses three new hijacking attacks on kernel data, which are based on bypassing OS security mechanisms. The first two hijacking attacks result in illegal access to files open in exclusive access. The third attack escalates process privileges, without applying token swapping. Although Windows security experts have issued new protection features, access attempts to the dynamically allocated data in the kernel are not fully controlled. MemoryRanger hypervisor is designed to fill this security gap. The updated MemoryRanger prevents these new attacks as well as supporting the Windows 10 1903 x64.
The details about an updated MemoryRanger
- paper: my.paper.pdf, my.paper.docx and the proceeding version
- slides: slides.pdf, slides.pptx
- speech: speech.pdf, speech.docx
- HITB page about MemoryRanger
- source code and six demos
Korkin, I. (2021, June 10). Kernel Hijacking Is Not an Option: MemoryRanger Comes to The Rescue Again. Paper presented at the Journal of Digital Forensics, Security and Law: Vol 16, No.1, Article 4. Retrieved from https://commons.erau.edu/jdfsl/vol16/iss1/4 |
Great post definitely. Hijacking or hacking computer data or mobile devices or other technical database has now been a major threat for all of us as day after day we are trending to depend on technology. But there are lot of hackers out their to steal our important data or identity. In this post the rescue by memory ranger you mentioned was really and inspiring and hope-creating. The video tutorial were also very interesting and educative. Once my instagram accoount was hacked and to recover it I had to get a hacker for hire. So, to keep our internet browsing safe and secured of course we have to take some extra layer security kits and also have to be aware of unknown threat.
ReplyDeleteOs Security As A Science: Anticipatory Improvements Under Countermeasures: (Windows) Kernel Hijacking Is Not An Option: Memoryranger Comes To Rescue Again >>>>> Download Now
ReplyDelete>>>>> Download Full
Os Security As A Science: Anticipatory Improvements Under Countermeasures: (Windows) Kernel Hijacking Is Not An Option: Memoryranger Comes To Rescue Again >>>>> Download LINK
>>>>> Download Now
Os Security As A Science: Anticipatory Improvements Under Countermeasures: (Windows) Kernel Hijacking Is Not An Option: Memoryranger Comes To Rescue Again >>>>> Download Full
>>>>> Download LINK CA