Kernel Intrusion System
Optyx examines description from DEF CON 9 Speaker’s Page: KIS - kernel Intrusion System This is the release of KIS.
Summary
Architecture and Background
Description from DEF CON 9 Speaker’s Page: KIS - kernel Intrusion System This is the release of KIS.
Vulnerability Analysis
KIS is a self contained binary that when executed on a system installs itself so that it will be loaded on reboot and loads a kernel module.
Exploitation and Demonstrations
This LKM hides itself, all of its subprocesses or desired processes, all of their files, directories, and network connections automatically.
Remediation and Defensive Strategies
The presentation will consist of demonstrating how to setup and use KIS as well as explain some of the basic design concepts. Optyx is a programmer, age 20, currently living in san francisco, california.
Related talks
Main Stage·48 min
Rob Bathurst · Jeff Thomas
Rob Bathurst and Jeff Thomas explore deploying honeytokens and canary files to detect unauthorized lateral movement and insider threat access early.
Main Stage·48 min
Sean Bodmer
Sean Bodmer explores analyzing intrusions and intruders at DEF CON 15, examining intrusion-detection and practical defenses.
Main Stage·44 min
Scott Moulton
Scott Moulton details scott Moulton: Re-Animating Drives - Advanced Data Recovery NEW.