Added new rootkit overall diagram for architecture section

This commit is contained in:
h3xduck
2022-06-11 22:20:27 -04:00
parent d7a9b0e777
commit c14b407644
11 changed files with 262 additions and 241 deletions

View File

@@ -61,12 +61,13 @@
\BOOKMARK [2][-]{subsection.3.4.1}{Attacks\040and\040limitations\040of\040networking\040programs}{section.3.4}% 61
\BOOKMARK [2][-]{subsection.3.4.2}{Takeaways}{section.3.4}% 62
\BOOKMARK [0][-]{chapter.4}{Design\040of\040a\040malicious\040eBPF\040rootkit}{}% 63
\BOOKMARK [1][-]{section.4.1}{Library\040injection\040attacks}{chapter.4}% 64
\BOOKMARK [2][-]{subsection.4.1.1}{ROP\040with\040eBPF}{section.4.1}% 65
\BOOKMARK [2][-]{subsection.4.1.2}{Bypassing\040hardening\040features\040in\040ELFs}{section.4.1}% 66
\BOOKMARK [2][-]{subsection.4.1.3}{Library\040injection\040via\040GOT\040hijacking}{section.4.1}% 67
\BOOKMARK [0][-]{chapter.5}{Evaluation}{}% 68
\BOOKMARK [1][-]{section.5.1}{Developed\040capabilities}{chapter.5}% 69
\BOOKMARK [1][-]{section.5.2}{Rootkit\040use\040cases}{chapter.5}% 70
\BOOKMARK [0][-]{chapter.6}{Related\040work}{}% 71
\BOOKMARK [0][-]{chapter.6}{Bibliography}{}% 72
\BOOKMARK [1][-]{section.4.1}{Rootkit\040architecture}{chapter.4}% 64
\BOOKMARK [1][-]{section.4.2}{Library\040injection\040attacks}{chapter.4}% 65
\BOOKMARK [2][-]{subsection.4.2.1}{ROP\040with\040eBPF}{section.4.2}% 66
\BOOKMARK [2][-]{subsection.4.2.2}{Bypassing\040hardening\040features\040in\040ELFs}{section.4.2}% 67
\BOOKMARK [2][-]{subsection.4.2.3}{Library\040injection\040via\040GOT\040hijacking}{section.4.2}% 68
\BOOKMARK [0][-]{chapter.5}{Evaluation}{}% 69
\BOOKMARK [1][-]{section.5.1}{Developed\040capabilities}{chapter.5}% 70
\BOOKMARK [1][-]{section.5.2}{Rootkit\040use\040cases}{chapter.5}% 71
\BOOKMARK [0][-]{chapter.6}{Related\040work}{}% 72
\BOOKMARK [0][-]{chapter.6}{Bibliography}{}% 73