Cross-Views Process Detection Based on Hardware-Assisted Virtual Machine
Chong Ling, Xing Dong Yang, Luo Zheng Zhang · Applied Mechanics and Materials · 2012
The current process hiding and detection technologies are analyzed, and the mechanism of cross-views discrepancy utilized by Strider GhostBuster are studied in detail, and based on Hardware-assisted Virtual Machine (HVM) a new framework for process detection is proposed, namely HCPD, whose effectiveness and integrality are verified through experiments.