Now you see me: Hide and seek in physical address space

Keyphrases

• You See 100%
• Attacker 100%
• Address Space 100%
• Hide-and-Seek 100%
• Physical Address 100%
• Anti-forensics 100%
• Memory Acquisition 50%
• Memory Forensics 50%
• Forensic Techniques 50%
• Acquisition Module 50%
• System Use 25%
• Novel Technique 25%
• Computing Systems 25%
• Agnostic 25%
• Memory-based 25%
• Acquisition Process 25%
• Operating System 25%
• System Software 25%
• Memory Regions 25%
• Linux 25%
• System Memory 25%
• Shadowing Technique 25%
• Physical Memory 25%
• O-space 25%
• Malware 25%
• Untrusted 25%
• Forensic Examiner 25%
• Digital Investigation 25%
• In-memory Data 25%
• OS Kernel 25%
• Memory Controller 25%
• Memory Address Space 25%
• Space Layout 25%
• Forensic System 25%
• Digital Forensics 25%

Computer Science

• Input/Output 100%
• Physical Address Space 100%
• Attackers 80%
• Forensic Technique 60%
• Anti-Forensics 60%
• Memory Forensics 40%
• Memory Acquisition 40%
• System Software 20%
• Malware 20%
• Acquisition Process 20%
• Growing Complexity 20%
• Memory System 20%
• Operating System 20%
• Physical Memory 20%
• Data Memory 20%
• Digital Investigation 20%
• Physical Address 20%
• Memory Address 20%
• Digital Forensic Examiner 20%
• Memory Controller 20%
• Potential Countermeasure 20%
• Linux 20%