A Linux rootkit improvement based on inline hook
Jun Hua Gu, Xian Ming, Tian Chen, RuiXiang Du · 2016
Rootkit and its detection technology promoted mutually.This paper proposes a kernel rootkit level division method based on function call relationship.The deeper rootkit's level is, the more difficult its detection becomes.We put forward and implement a rootkit method based on inline hook.It pushes the rootkit down a lower level in the kernel space.Experimental results show our method has excellent performance on hiding malicious programs.