Lost in Transaction: Process Doppelgänging

Дата: 08.01.2020. Автор: CISOCLUB. Категории: Подкасты и видео по информационной безопасности

Process Hollowing is a technique first introduced years ago by attackers to thwart the mitigation capabilities of security products. However, most of today’s solutions are able to detect and prevent such notorious attacks. In this talk, we will present a new technique, dubbed Process Doppelgänging, which has similar advantages but is much harder to detect — let alone prevent.

By Tal Liberman & Eugene Kogan

Full Abstract & Presentation Materials: https://www.blackhat.com/eu-17/briefings.html#lost-in-transaction-process-doppelganging

CISOCLUB

Об авторе CISOCLUB

Редакция CISO CLUB. Официальный аккаунт. CISO CLUB - информационный портал и профессиональное сообщество специалистов по информационной безопасности.
Читать все записи автора CISOCLUB

Добавить комментарий

Ваш адрес email не будет опубликован. Обязательные поля помечены *