Design and Implementation of Linux’s Security Monitor Based on LKM
LV Peng
Abstract
LV Peng
Abstract
This paper analyses the mechanism of two Linux’s backdoor tools and points out their principles and harms. According to the characteristics of Linux, two kinds of protecting Linux’s kernel methods are proposed in this paper, that is , single kernel module mode and LKM with security check mode. The realization method of Linux monitor based on LKM is also presented in this paper. The experimentations show that this monitor can efficiently record the attacks and illegal access from LKM backdoors and viruses,can help the system administrator to safeguard the security of Linux.
A significance statement is not available in the OpenAlex record.
A contribution statement is not available in the OpenAlex record.
Method details are not available in the OpenAlex metadata.
Findings are not separately available in the OpenAlex metadata.
Limitations are not available in the OpenAlex metadata.
Application details are not available in the OpenAlex metadata.
This paper analyses the mechanism of two Linux’s backdoor tools and points out their principles and harms. According to the characteristics of Linux, two kinds of protecting Linux’s kernel methods are proposed in this paper, that is , single kernel module mode and LKM with security check mode. The realization method of Linux monitor based on LKM is also presented in this paper. The experimentations show that this monitor can efficiently record the attacks and illegal access from LKM backdoors and viruses,can help the system administrator to safeguard the security of Linux.
Key concepts: Computer science, Linux kernel, Backdoor, System call, Operating system, Linux Unified Key Setup, Mode (computer interface), System administrator