{"id":13359,"date":"2021-12-09T20:57:18","date_gmt":"2021-12-10T01:57:18","guid":{"rendered":"https:\/\/carleton.ca\/scs\/?page_id=13359"},"modified":"2021-12-09T20:57:18","modified_gmt":"2021-12-10T01:57:18","slug":"tr-11-05-protecting-commodity-kernels-from-execution-of-unauthorized-code","status":"publish","type":"page","link":"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2011\/tr-11-05-protecting-commodity-kernels-from-execution-of-unauthorized-code\/","title":{"rendered":"TR-11-05: Protecting Commodity Kernels from Execution of Unauthorized Code"},"content":{"rendered":"

Carleton University
\nTechnical Report<\/a> TR-11-05
\nMarch 15, 2011<\/p>\n

Protecting Commodity Kernels from Execution of Unauthorized Code<\/h2>\n
\n
\n
\n
\n
\n
\n
\n
\n
Glenn Wurster, Paul C. van Oorschot, Trent Jaeger<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n
\n

Abstract<\/h3>\n

Motivated by the goal of hardening operating system kernels against rootkits and related malware, we provide an overview of the common interfaces and methods which can be used to modify (either legitimately or maliciously) the kernel which is run on a commodity desktop computer. We also give an overview of how these interfaces can be restricted or disabled. While we concentrate mainly on Linux, many of the methods for modifying kernel code also exist on other operating systems, some of which are discussed.<\/p>\n

TR-11-05.pdf<\/a><\/p>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

Carleton University Technical Report TR-11-05 March 15, 2011 Protecting Commodity Kernels from Execution of Unauthorized Code Glenn Wurster, Paul C. van Oorschot, Trent Jaeger Abstract Motivated by the goal of hardening operating system kernels against rootkits and related malware, we provide an overview of the common interfaces and methods which can be used to modify […]<\/p>\n","protected":false},"author":49,"featured_media":0,"parent":12489,"menu_order":0,"comment_status":"closed","ping_status":"closed","template":"","meta":{"_relevanssi_hide_post":"","_relevanssi_hide_content":"","_relevanssi_pin_for_all":"","_relevanssi_pin_keywords":"","_relevanssi_unpin_keywords":"","_relevanssi_related_keywords":"","_relevanssi_related_include_ids":"","_relevanssi_related_exclude_ids":"","_relevanssi_related_no_append":"","_relevanssi_related_not_related":"","_relevanssi_related_posts":"","_relevanssi_noindex_reason":"","_mi_skip_tracking":false,"_exactmetrics_sitenote_active":false,"_exactmetrics_sitenote_note":"","_exactmetrics_sitenote_category":0,"footnotes":"","_links_to":"","_links_to_target":""},"yoast_head":"\nTR-11-05: Protecting Commodity Kernels from Execution of Unauthorized Code - School of Computer Science<\/title>\n<meta name=\"description\" content=\"Carleton University Technical Report TR-11-05 March 15, 2011 Protecting Commodity Kernels from Execution of Unauthorized Code Glenn Wurster, Paul C. van\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2011\/tr-11-05-protecting-commodity-kernels-from-execution-of-unauthorized-code\/\" \/>\n<meta name=\"twitter:label1\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data1\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2011\/tr-11-05-protecting-commodity-kernels-from-execution-of-unauthorized-code\/\",\"url\":\"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2011\/tr-11-05-protecting-commodity-kernels-from-execution-of-unauthorized-code\/\",\"name\":\"TR-11-05: Protecting Commodity Kernels from Execution of Unauthorized Code - School of Computer Science\",\"isPartOf\":{\"@id\":\"https:\/\/carleton.ca\/scs\/#website\"},\"datePublished\":\"2021-12-10T01:57:18+00:00\",\"dateModified\":\"2021-12-10T01:57:18+00:00\",\"description\":\"Carleton University Technical Report TR-11-05 March 15, 2011 Protecting Commodity Kernels from Execution of Unauthorized Code Glenn Wurster, Paul C. van\",\"breadcrumb\":{\"@id\":\"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2011\/tr-11-05-protecting-commodity-kernels-from-execution-of-unauthorized-code\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2011\/tr-11-05-protecting-commodity-kernels-from-execution-of-unauthorized-code\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2011\/tr-11-05-protecting-commodity-kernels-from-execution-of-unauthorized-code\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/carleton.ca\/scs\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Research\",\"item\":\"https:\/\/carleton.ca\/scs\/research\/\"},{\"@type\":\"ListItem\",\"position\":3,\"name\":\"SCS Technical Reports\",\"item\":\"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/\"},{\"@type\":\"ListItem\",\"position\":4,\"name\":\"Technical Reports 2011\",\"item\":\"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2011\/\"},{\"@type\":\"ListItem\",\"position\":5,\"name\":\"TR-11-05: Protecting Commodity Kernels from Execution of Unauthorized Code\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/carleton.ca\/scs\/#website\",\"url\":\"https:\/\/carleton.ca\/scs\/\",\"name\":\"School of Computer Science\",\"description\":\"Carleton University\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/carleton.ca\/scs\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"TR-11-05: Protecting Commodity Kernels from Execution of Unauthorized Code - School of Computer Science","description":"Carleton University Technical Report TR-11-05 March 15, 2011 Protecting Commodity Kernels from Execution of Unauthorized Code Glenn Wurster, Paul C. van","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2011\/tr-11-05-protecting-commodity-kernels-from-execution-of-unauthorized-code\/","twitter_misc":{"Est. reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2011\/tr-11-05-protecting-commodity-kernels-from-execution-of-unauthorized-code\/","url":"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2011\/tr-11-05-protecting-commodity-kernels-from-execution-of-unauthorized-code\/","name":"TR-11-05: Protecting Commodity Kernels from Execution of Unauthorized Code - School of Computer Science","isPartOf":{"@id":"https:\/\/carleton.ca\/scs\/#website"},"datePublished":"2021-12-10T01:57:18+00:00","dateModified":"2021-12-10T01:57:18+00:00","description":"Carleton University Technical Report TR-11-05 March 15, 2011 Protecting Commodity Kernels from Execution of Unauthorized Code Glenn Wurster, Paul C. van","breadcrumb":{"@id":"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2011\/tr-11-05-protecting-commodity-kernels-from-execution-of-unauthorized-code\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2011\/tr-11-05-protecting-commodity-kernels-from-execution-of-unauthorized-code\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2011\/tr-11-05-protecting-commodity-kernels-from-execution-of-unauthorized-code\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/carleton.ca\/scs\/"},{"@type":"ListItem","position":2,"name":"Research","item":"https:\/\/carleton.ca\/scs\/research\/"},{"@type":"ListItem","position":3,"name":"SCS Technical Reports","item":"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/"},{"@type":"ListItem","position":4,"name":"Technical Reports 2011","item":"https:\/\/carleton.ca\/scs\/research\/scs-technical-reports\/technical-reports-2011\/"},{"@type":"ListItem","position":5,"name":"TR-11-05: Protecting Commodity Kernels from Execution of Unauthorized Code"}]},{"@type":"WebSite","@id":"https:\/\/carleton.ca\/scs\/#website","url":"https:\/\/carleton.ca\/scs\/","name":"School of Computer Science","description":"Carleton University","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/carleton.ca\/scs\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"}]}},"acf":{"banner_image_type":"none","banner_button":"no"},"_links":{"self":[{"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/pages\/13359"}],"collection":[{"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/pages"}],"about":[{"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/types\/page"}],"author":[{"embeddable":true,"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/users\/49"}],"replies":[{"embeddable":true,"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/comments?post=13359"}],"version-history":[{"count":1,"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/pages\/13359\/revisions"}],"predecessor-version":[{"id":13360,"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/pages\/13359\/revisions\/13360"}],"up":[{"embeddable":true,"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/pages\/12489"}],"wp:attachment":[{"href":"https:\/\/carleton.ca\/scs\/wp-json\/wp\/v2\/media?parent=13359"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}