Windows Vista Kernel Security [EN].pptVIP

Who am I? High school student Website/Blog: Microsoft Student Partner (MSP) Security Fanatics ! Reverse Engineering Vulnerabilities Analyse Malicious Binary Research Security Tools Programming Core System Security Research TinyKRNL Project Kernel Developer (ATAPI) Agenda Kernel Hooking, why ? Patchguard Code Integrity Signed Drivers Windows Vista (32 bits Kernel) SSDT KIDT MSR Windows Vista (64 bits Kernel) SSDT KIDT MSR Kernel Hooking, Why ? Mainly from rootkits ! Modification of system table like SDT Functions NtCreateProcess, NtSystemInformation, ... Modification of internal stuctures PsL