一种对基于Netfilter后门模块的检测方法

Detection of Backdoor Module Based on Netfilter

本文介绍了Netfilter框架,分析了利用Netfilter框架实现LKM后门模块的原理并给出了实现方法和步骤。文章同时引进并详细分析了一种针对Netfilter后门模块的检测方法,并给出了检测方法实现的过程。

This paper first introduces the frame of Netfilter,then describes the steps of realizing a LKM based on Netfilter,last introduces and detailed analyses a method to detect LKM modules based on Netfilter and presents a realization of the detection.