Bleeping Computer

LKRG: Linux to Get a Loadable Kernel Module for Runtime Integrity Checking

Members of the open source community are working on a new security-focused project for the Linux kernel. Named Linux Kernel Runtime Guard (LKRG), this is a loadable kernel module that will perform ...
电子工程专辑

LinuxKernel运行时安全检测之LKRG-原理篇

虽然经常更新内核版本通常被认为是一种安全最佳实践，但由于各种原因，尤其是生产环境中的服务器无法这样操作。这就意味着在机器运行时，会存在利用已知的漏洞(当然，还会有一些未知的漏洞)来进行攻击的情况，所以需要某种方法来检测和阻止对这些 ...
电子工程专辑

LinuxKernel运行时安全检测之LKRG-实践篇

从文章Linux Kernel运行时安全检测之LKRG-原理篇可以看到，LKRG可以对正在运行的Linux内核进行检测，并希望能够及时响应对正在运行的进程用户id等凭证未经授权的修改(完整性检查)。对于进程凭据，LKRG尝试检测漏洞，并在内核根据未经授权的凭据授予访问权限 ...
Linux Journal

Inside the Linux Kernel Runtime Guard (LKRG): A New Layer of Kernel Integrity Protection

In an era where security threats continually evolve, protecting the heart of an operating system, the kernel, has never been more critical. One tool gaining traction in the Linux world is the Linux ...
ITWire

Linux module aims at security, but will it make the cut?

The Linux Kernel Runtime Guard has been devised by the Openwall project. LKRG checks at runtime to find out if any exploits for security flaws are in a system; if so, it attempts to block such attacks ...
Linux Journal

OpenWall's LKRG, Hitachi Joins the Open Invention Network, xcp-ng Kickstarter Campaign and More

News updates for February 6, 2018. OpenWall recently announced the Linux Kernel Runtime Guard (LKRG), which is "a loadable kernel module that performs runtime integrity checking of the Linux kernel ...
ITWire

iTWire - Linux module aims at security, but will it make the cut?

Asked about LKRG, Linux expert Russell Coker, a longtime developer for the Debian GNU/Linux project who has also contributed code to the NSA's SE-Linux project, told iTWire: "The aim of that is to ...