Igor Korkin

27 Abonné

An expert in digital security, full of passion and curiosity, I have ambitions to improve anti-malware protection systems utilizing machine learning techniques and to hunt zero-day exploits. Cybersecurity is my life: my job, and also my hobby and lifestyle. My areas of expertise are kernel mode rootkits detection, Windows internals, and hardware virtualization technologies (Intel VT-x, EPT, PT). I have published more than 20 research papers; six recent papers are double-blind peer-reviewed, see my blog - igorkorkin.blogspot.com.

windows kernel memory protection memory isolation kernel integrity hypervisor rootkit detection rootkits linux passwords memory forensics mimipy mimipenguin protected process light memoryranger kernel data protection hijacking attacks on memory hypervisor-based protection blackhat bheu cnc stuxnet dynamically allocated memory information leakage tracking memory access anti-forensics scattered fragments memory analysis anticipatory enhancement cuda instruction execution time nested hypervisors hypervisor threat statistics and data analysis blue pill rootkit hypervisor rpi rating point inspection processes detectio drivers detection probabilistic search dbs weight matrix dynamic bit signature pattern recognition problem hardware virtualization vmbr stealth malware detection system rootkit bios

Tout plus

Activité
À propos

Hypervisor-Based Active Data Protection for Integrity and Confidentiality of Dynamically Allocated Memory in Windows Kernel

il y a 5 ans • 4771 Vues

Igor Korkin

Présentations

Igor Korkin dissertation presentation

Korkin how-to

Applying Memory Forensics to Rootkit Detection

Two Challenges of Stealthy Hypervisors Detection: Time Cheating and Data Fluctuations

Acceleration of Statistical Detection of Zero-day Malware in the Memory Dump Using CUDA-enabled GPU Hardware

Detect Kernel-Mode Rootkits via Real Time Logging & Controlling Memory Access

Hypervisor-Based Active Data Protection for Integrity and Confidentiality of Dynamically Allocated Memory in Windows Kernel

Divide et Impera: MemoryRanger Runs Drivers in Isolated Kernel Spaces

MemoryRanger Prevents Hijacking FILE_OBJECT Structures in Windows Kernel

Kernel Hijacking Is Not an Option: MemoryRanger Comes to The Rescue Again

Protected Process Light will be Protected – MemoryRanger Fills the Gap Again

Your Linux Passwords Are in Danger: MimiDove Meets the Challenge (lightning talk)

J’aime

BlueHat v18 || Return of the kernel rootkit malware (on windows 10)

VXCON 2017

Hybis: Advanced Introspection for Effective Windows Guest Protection

Internet of Medical Things: Technological Environment of Personalized/ Precision Medicine

Pitfalls of virtual machine introspection on modern hardware

CrySys guest-lecture: Virtual machine introspection on modern hardware

Detecting Evasive Malware in Sandbox

31c3 Presentation - Virtual Machine Introspection

Kernel Memory Protection by an Insertable Hypervisor which has VM Introspection and Stealth Breakpoints (IWSEC2014)

Stealthy, Hypervisor-based Malware Analysis

Cyber Security in Transportation