Abstract: Thread dispatch based hidden processes detection technique makes use of the processes resource assignment and dispatch mechanism in operating system to scan active threads in system kernel for reverse detecting active processes list. This method can detec

Key words: Trojan horse, Rootkit, Process hiding, Thread dispatch, Intrusion detection