
rootkit-detection-ebpf-time-trace
Detection of rootkit file hiding activities through analysis of shifts in kernel function execution times.
anomaly-detectioneducationintrusion-detection+2
32

Detection of rootkit file hiding activities through analysis of shifts in kernel function execution times.

Analyzes LLM internal states and 100+ attention/probability features to train classifiers that detect document poisoning attacks in RAG systems.