Xeno Kovah - MITRE
Students: Spring 2025, unless noted otherwise, sessions will be virtual on Zoom.
Rootkits
Sep 08, 2010
Download: MP4 Video Size: 445.4MBWatch on YouTube
Abstract
This talk will examine the state of current and proposed rootkits, to try and answer the following question: are rootkits stupid and lame? The speaker will provide supporting evidence that most all rootkits are eminently detectable, in theory. But theory doesn't matter if tools for detection are not used in practice. Therefore the talk will highlight the few weaknesses in detection methodologies and many weaknesses in tools, so that the audience can think about what they could do to make the world more secure.About the Speaker
"Xeno Kovah is mortal and fallible. So are you."