Asian Journal of Information Technology
ISSN: Online 1993-5994ISSN: Print 1682-3915
Abstract
This research analyses the mechanism of using LKMs backdoors to hide processes. According to the flaw in backdoors’ design and the characteristics of/proc filesystem, a new method for finding hided processes is presented. That is traversing all possible PID directories to find out each existent process in fact. Through comparing them with the ordinary output, the hided processes would be discovered. At last the code realized in Perl has been presented. The experiment shows that this method can find the processes hided by LKMs backdoors efficiently.
How to cite this article:
Yuan Yuan and Dai Guanzhong . Finding Hided Processes in Linux.
DOI: https://doi.org/10.36478/ajit.2007.618.621
URL: https://www.makhillpublications.co/view-article/1682-3915/ajit.2007.618.621