3 ms·
Once your trusted space is compromised (the kernel space in this case), trying to detect or fix the compromise from that same space turns into a game of Core Wa
by jevinskie 16y ago
Once your trusted space is compromised (the kernel space in this case), trying to detect or fix the compromise from that same space turns into a game of Core War: http://en.wikipedia.org/wiki/Core_War http://en.wikipedia.org/wiki/Core_War
Scanning for rootkits from a hypervisor would solve this problem... as long as your hypervisor isn't compromised itself!