Invisible Intruders: Rootkits in Practice

To catch a cracker you must understand the tools and techniques he will use to try to defeat you. A system cracker’s first goal is to hide his presence from you, the administrator. One of the most widely used cracker tools for doing this is the rootkit. A rootkit gets its name not because the toolbox is composed of tools to crack root, but instead because it comprises tools to keep root...