-
动态获取sys call table的方法: https://memset.wordpress.com/2011/01/20/syscall-hijacking-dynamically-obtain-syscall-table-address-kernel-2-6-x/
-
Rootkit技术入门:从syscall到hook! https://www.anquanke.com/post/id/85202
-
小白学Linux之内核模块编程 https://blog.csdn.net/tigerjibo/article/details/6010997