Detecting loadable kernel modules (LKM)

A wonderful paper on detecting trojan Loadable Kernel Modules has been written. While all the BSDs, Solaris, and Linux support LKMs, this paper focuses specifically on Linux.