KIS - kernel Intrusion System

Presented at DEF CON 9 (2001), July 14, 2001, 10 a.m. (50 minutes)

This is the release of KIS. KIS is a self contained binary that when executed on a system installs itself so that it will be loaded on reboot and loads a kernel module. This LKM hides itself, all of its subprocesses or desired processes, all of their files, directories, and network connections automatically. The presentation will consist of demonstrating how to setup and use KIS as well as explain some of the basic design concepts.

Presenters:

• Optyx
  Optyx is a programmer, age 20, currently living in san francisco, california.

Links:

• https://defcon.org/html/defcon-9/defcon-9-speakers.html#Optyx
• https://infocon.org/cons/DEF CON/DEF CON 9/DEF CON 9 video/DEF CON 9 - Optyx - Kernel Intrusion System.mp4
• https://www.youtube.com/watch?v=r2Rc0aLjp2w

Similar Presentations:

• DEF CON 17 (2009) / Runtime Kernel Patching on Mac OS X
• ekoparty 14 (2018) / AFL, QBDI And KSE Are on a Boat...