Organizer
Partner Company
Android Rootkit & Touch Pad Based Keylogger
X82
Inetcop
Abstract
We have seen various linux kernel hooking techniques of some pioneers. This presentation covers hooking techniques that can be used in linux kernel based on Android platform using ARM(Advanced RISC Machine) process. This presentation is composed of three parts. First part is the 4 hooking techniques that can be used on ARM linux kernels on any machine. Second one is about transforming existing linux kernel rootkit into a smart phone rootkit. The last part is how to access kernel via kmem device. It is necessary because the rootkits only work on certain version of kernels. The mottos of the presentation are 'smart' and 'simple'. He focuses on hooking by modifying the least kernel memory and by taking the simplest way. In addition, Touch pad keylogger that can be used on Android linux will be explained.
Speaker Info
X82(You Donghun) is the director of smart platform security lab in Inetcop. He is also on his doctoral program in information security. He has given lectures to various national institutions and in seminars and conferences with various security related topics. He has written and publicized numerous security advisories and POC exploits since 2002. He also worked for SNOSOFT as a security advisor checking their security advisories and writing exploits. Check his website for more information.