Career Development White Papers
Detect rootkits and rootkit behavior with these techniques
Overview
This sample chapter, taken from Rootkits: Subverting the Windows Kernel, discusses two basic approaches to rootkit detection.
Rootkits can be difficult to detect, especially when they operate in the kernel. This is because akernel rootkit can alter functions used by all software, including those needed by security software.
This sample chapter from the Rootkits: Subverting the Windows Kernel discusses two basic approaches to rootkit detection: detecting the rootkit itself, and detecting the behavior of a rootkit. Once you become familiar with these approaches, you will be in a better position to defend yourself.
Title: Rootkits: Subverting the Windows Kernel
ISBN: 0321294319
Published: July 2005
Author: Jamie Butler, Greg Hoglund
Chapter: Chapter 10: Rootkit Detection
Published by Addison-Wesley Professional
| Publisher | TechRepublic | File Format | |
|---|---|---|---|
| Date Published | April 2006 | Downloads | 79 |
| Format | Downloads | ||
| Topics | |||
-
Did you find this white paper useful? 32 out of 50 users found this white paper useful
White Paper RSSFrom fear to value; CIO strategies for propelling business through the economic crisis
DownloadYour aspiration: As a Chief Information Officer, drive change, innovation and efficiency to help build a smarter enterprise that will prosper amidst global competition. Your daily challenge: As a Chief...
How can today's CIO make the biggest impact on their organization? Learn more here
We listened to more than 2500 CIOs worldwide, including 158 CIOs from midsize firms. Those discussions showed us the demands on CIOs are changing, and in reaction, how today's...
