7 citations · 17 across the 10 of their papers we have counts for
11 papers
ALPC Is In Danger: ALPChecker Detects Spoofing and Blinding
Anastasiia Kropova, Igor Korkin
The purpose of this study is to evaluate the possibility of implementing an attack on ALPC connection in the Windows operating system through the kernel without closing the connect…
RASP for LSASS: Preventing Mimikatz-Related Attacks
Anna Revazova, Igor Korkin
The Windows authentication infrastructure relies on the Local Security Authority (LSA) system, with its integral component being lsass.exe. Regrettably, this framework is not imper…
Chiral Janus complexes
Fyodor Malikov, Vadim Schechtman
We propose chiral analogues of some infinite complexes appearing in the description of the coherent derived categories for projective spaces.
Windows Kernel Hijacking Is Not an Option: MemoryRanger Comes to the Rescue Again
Igor Korkin
The security of a computer system depends on OS kernel protection. It is crucial to reveal and inspect new attacks on kernel data, as these are used by hackers. The purpose of this…
MemoryRanger Prevents Hijacking FILE_OBJECT Structures in Windows Kernel
Igor Korkin
Windows OS kernel memory is one of the main targets of cyber-attacks. By launching such attacks, hackers are succeeding in process privilege escalation and tampering with users dat…
Divide et Impera: MemoryRanger Runs Drivers in Isolated Kernel Spaces
Igor Korkin
One of the main issues in the OS security is to provide trusted code execution in an untrusted environment. During executing, kernel-mode drivers allocate and process memory data:…
Hypervisor-Based Active Data Protection for Integrity and Confidentiality of Dynamically Allocated Memory in Windows Kernel
Igor Korkin
One of the main issues in the OS security is providing trusted code execution in an untrusted environment. During executing, kernel-mode drivers dynamically allocate memory to stor…
Detect Kernel-Mode Rootkits via Real Time Logging & Controlling Memory Access
Igor Korkin, Satoshi Tanda
Modern malware and spyware platforms attack existing antivirus solutions and even Microsoft PatchGuard. To protect users and business systems new technologies developed by Intel an…
Acceleration of Statistical Detection of Zero-day Malware in the Memory Dump Using CUDA-enabled GPU Hardware
Igor Korkin, Iwan Nesterow
This paper focuses on the anticipatory enhancement of methods of detecting stealth software. Cyber security detection tools are insufficiently powerful to reveal the most recent cy…
Two Challenges of Stealthy Hypervisors Detection: Time Cheating and Data Fluctuations
Igor Korkin
Hardware virtualization technologies play a significant role in cyber security. On the one hand these technologies enhance security levels, by designing a trusted operating system.…
Applying Memory Forensics to Rootkit Detection
Igor Korkin, Ivan Nesterov
Volatile memory dump and its analysis is an essential part of digital forensics. Among a number of various software and hardware approaches for memory dumping there are authors who…