Investigating the Hooking Behavior: A Page-Level Memory Monitoring Method for Live Forensics-Reference-Cited by-同舟云学术

Investigating the Hooking Behavior: A Page-Level Memory Monitoring Method for Live Forensics

Published:2014 Issue: Volume: Page:255-272
ISSN:0302-9743
Container-title:Lecture Notes in Computer Science
language:
Short-container-title:

Author:

Cheng Yingxin,Fu Xiao,Luo Bin,Yang Rui,Ruan Hao

Publisher

Springer International Publishing

Link

http://link.springer.com/content/pdf/10.1007/978-3-319-13257-0_15

Reference31 articles.

1. Adelstein, F.: Live forensics: Diagnosing your system without killing it first. Commun. ACM 49(2), 63–66 (2006)

2. Al-Shaer, E., Jha, S., Keromytis, A.D. (eds.): Proceedings of the 2009 ACM Conference on Computer and Communications Security, CCS 2009, Chicago, Illinois, USA, November 9-13. ACM (2009)

3. AMD: Amd virtualization (2014), http://www.amd.com/us/solutions/servers/virtualization/Pages/virtualization.aspx

4. Arasteh, A.R., Debbabi, M.: Forensic memory analysis: From stack and code to execution history. Digital Investigation 4, 114–125 (2007)

5. Athreya, M.B.: Subverting linux on-the-fly using hardware virtualization technology (2010)

Cited by 4 articles. 订阅此论文施引文献订阅此论文施引文献，注册后可以免费订阅5篇论文的施引文献，订阅后可以查看论文全部施引文献

1. Virtual Machine Introspection in Virtualization: A Security Perspective;2021 Thirteenth International Conference on Contemporary Computing (IC3-2021);2021-08-05

2. Digital Logic and Asynchronous Datapath With Heterogeneous TFET-MOSFET Structure for Ultralow-Energy Electronics;IEEE Journal on Exploratory Solid-State Computational Devices and Circuits;2020-12

3. A lightweight live memory forensic approach based on hardware virtualization;Information Sciences;2017-02

4. Virtual Machine Introspection: Techniques and Applications;2015 10th International Conference on Availability, Reliability and Security;2015-08