Studienprojekte
PROJEKT
chameleon
FAKTEN
Themenfeld
Malware Analyse
Zeitraum
SS 2007
Status
finished
FH-Studierende
Markus Auer, Herwig Köck, Lukas Nothdurfter, Lukas Reiter
FH-Betreuer
DI Eckehard Hermann
Kurzbeschreibung
The purpose of the project is to gain knowledge about the functionality of rootkits. Furthermore, the members of the project team are going to find a way to recognize rootkits installed on a system using host-based intrusion prevention systems and host intrusion detection systems.
DETAILS
Ausgangssituation / Motivation / Einleitung
At the latest from the affair of Sony BMGs copy protection, which installs a special rootkit on computers, more and more people get aware of the danger, which comes with rootkits.But not only Sony uses rootkits to hide their malware activities, this kind of malware gets extremely widespread. This and personal interests headed to project.
Projektziel
The goals of the project chameleon were:* Obtaining a fundamental understanding how rootkits work* Developing some kernel rootkit functions and thereby* Gaining knowledge about secure detection and prevention of rootkits.
Umsetzung
During the first part, a rootkit for Windows XP was developed to get an advanced knowledge of the operating system and its security leaks. After that an analysis took place, where different anti-malware tools were tested. The results were written down into the technical and project documentation.


