Joanna Rutkowska

@rootkovska ↗

Deleted No

Hibernated No

Last Checked March 11, 2019

Created

Wed Jan 04 09:50:20 +0000 2017

Likes

Retweets

Source

TweetDeck

View Raw Data

JSON Data

View on Twitter

Likely Available

Joanna Rutkowska @rootkovska

To detect such attacker, the hvisor would need to monitor all interesting functions in the kernel. Soon the hvisor would become v. complex.. — PolitiTweet.org

Posted Jan. 4, 2017

Preceded By

Joanna Rutkowska @rootkovska

Contrary to a popular opinion, an attacker doesn't need to execve(/bin/bash) nor calc.exe, nor call any syscalls, once in the kernel. — PolitiTweet.org

Posted Jan. 4, 2017

Followed By

Joanna Rutkowska @rootkovska

In fact it would quickly mirror the complexity of the kernel that it is supposed to monitor. We thus end up not far from where we started :/ — PolitiTweet.org

Posted Jan. 4, 2017