When Firmware Modifications Attack: A Case Study of Embedded Exploitation
Detecting kernel-level rootkits through binary analysis