A study on the prevention mechanisms for kernel attacks

Abstract

The kernel of the operating system is the lifeline of a system. It controls all the components of the system and is needed for a problem-free execution of all the processes in the system. In the past decade, attackers are launching attacks that modify the kernel and remain undetected due to less security protection to the kernel. Kernel rootkits were used to manipulate the code to gain root-level access. Now, with anti-viruses and firewalls blocking malicious codes in the system, attackers have started targeting the kernel memory to subvert the running behavior of the system without any code injection. This is known as a kernel data attack. This paper discusses the different types of attacks that have been launched by the attackers to manipulate the kernel in the operating system and classifies the different attacks based on their types. It also discusses the currently existing techniques to prevent kernel attacks and their characteristics.