ARCHIVES

Rootkits are malicious software designed to conceal the presence of unauthorized access to a computer system. Detecting rootkits is challenging due to their ability to evade traditional security mechanisms. This project proposes a novel rootkit detection technique based on behavioural analysis, security log analysis and anomaly detection. The approach Uses such an algorithm that baselines system behaviour and identify deviations indicative of rootkit activity. Key features include dynamic analysis of system calls, file system interactions, and network traffic patterns. Evaluation results demonstrate the effectiveness of the proposed method in detecting both known and novel rootkits with high accuracy and low false positives.