关键词: 特洛伊木马 Rootkit 进程隐藏 线程调度 入侵检测

Abstract: Thread dispatch based hidden processes detection technique makes use of the processes resource assignment and dispatch mechanism in operating system to scan active threads in system kernel for reverse detecting active processes list. This method can detec

Key words: Trojan horse, Rootkit, Process hiding, Thread dispatch, Intrusion detection