A New Windows Driver-Hidden Rootkit Based on Direct Kernel Object Manipulation

Woei-Jiunn Tsaur, Yuh-Chen Chen, Being-Yu Tsai. A New Windows Driver-Hidden Rootkit Based on Direct Kernel Object Manipulation. In Arrems Hua, Shih-Liang Chang, editors, Algorithms and Architectures for Parallel Processing, 9th International Conference, ICA3PP 2009, Taipei, Taiwan, June 8-11, 2009. Proceedings. Volume 5574 of Lecture Notes in Computer Science, pages 202-213, Springer, 2009. [doi]

@inproceedings{TsaurCT09,
  title = {A New Windows Driver-Hidden Rootkit Based on Direct Kernel Object Manipulation},
  author = {Woei-Jiunn Tsaur and Yuh-Chen Chen and Being-Yu Tsai},
  year = {2009},
  doi = {10.1007/978-3-642-03095-6_21},
  url = {http://dx.doi.org/10.1007/978-3-642-03095-6_21},
  tags = {rule-based,  direct manipulation},
  researchr = {https://researchr.org/publication/TsaurCT09},
  cites = {0},
  citedby = {0},
  pages = {202-213},
  booktitle = {Algorithms and Architectures for Parallel Processing, 9th International Conference, ICA3PP 2009, Taipei, Taiwan, June 8-11, 2009. Proceedings},
  editor = {Arrems Hua and Shih-Liang Chang},
  volume = {5574},
  series = {Lecture Notes in Computer Science},
  publisher = {Springer},
  isbn = {978-3-642-03094-9},
}