Rootkits: Subverting the Windows Kernel

Valutazione media 4,03
( su 129 valutazioni fornite da GoodReads )
 
9780321294319: Rootkits: Subverting the Windows Kernel

"It's imperative that everybody working in the field of cyber-security read this book to understand the growing threat of rootkits."
--Mark Russinovich, editor, Windows IT Pro / Windows & .NET Magazine

"This material is not only up-to-date, it defines up-to-date. It is truly cutting-edge. As the only book on the subject, Rootkits will be of interest to any Windows security researcher or security programmer. It's detailed, well researched and the technical information is excellent. The level of technical detail, research, and time invested in developing relevant examples is impressive. In one word: Outstanding."
--Tony Bautts, Security Consultant; CEO, Xtivix, Inc.

"This book is an essential read for anyone responsible for Windows security. Security professionals, Windows system administrators, and programmers in general will want to understand the techniques used by rootkit authors. At a time when many IT and security professionals are still worrying about the latest e-mail virus or how to get all of this month's security patches installed, Mr. Hoglund and Mr. Butler open your eyes to some of the most stealthy and significant threats to the Windows operating system. Only by understanding these offensive techniques can you properly defend the networks and systems for which you are responsible."
--Jennifer Kolde, Security Consultant, Author, and Instructor

"What's worse than being owned? Not knowing it. Find out what it means to be owned by reading Hoglund and Butler's first-of-a-kind book on rootkits. At the apex the malicious hacker toolset--which includes decompilers, disassemblers, fault-injection engines, kernel debuggers, payload collections, coverage tools, and flow analysis tools--is the rootkit. Beginning where Exploiting Software left off, this book shows how attackers hide in plain sight.

"Rootkits are extremely powerful and are the next wave of attack technology. Like other types of malicious code, rootkits thrive on stealthiness. They hide away from standard system observers, employing hooks, trampolines, and patches to get their work done. Sophisticated rootkits run in such a way that other programs that usually monitor machine behavior can't easily detect them. A rootkit thus provides insider access only to people who know that it is running and available to accept commands. Kernel rootkits can hide files and running processes to provide a backdoor into the target machine.

"Understanding the ultimate attacker's tool provides an important motivator for those of us trying to defend systems. No authors are better suited to give you a detailed hands-on understanding of rootkits than Hoglund and Butler. Better to own this book than to be owned."
--Gary McGraw, Ph.D., CTO, Cigital, coauthor of Exploiting Software (2004) and Building Secure Software (2002), both from Addison-Wesley

"Greg and Jamie are unquestionably the go-to experts when it comes to subverting the Windows API and creating rootkits. These two masters come together to pierce the veil of mystery surrounding rootkits, bringing this information out of the shadows. Anyone even remotely interested in security for Windows systems, including forensic analysis, should include this book very high on their must-read list."
--Harlan Carvey, author of Windows Forensics and Incident Recovery (Addison-Wesley, 2005)

Rootkits are the ultimate backdoor, giving hackers ongoing and virtually undetectable access to the systems they exploit. Now, two of the world's leading experts have written the first comprehensive guide to rootkits: what they are, how they work, how to build them, and how to detect them. Rootkit.com's Greg Hoglund and James Butler created and teach Black Hat's legendary course in rootkits. In this book, they reveal never-before-told offensive aspects of rootkit technology--learn how attackers can get in and stay in for years, without detection.

Hoglund and Butler show exactly how to subvert the Windows XP and Windows 2000 kernels, teaching concepts that are easily applied to virtually any modern operating system, from Windows Server 2003 to Linux and UNIX. They teach rootkit programming techniques that can be used for a wide range of software, from white hat security tools to operating system drivers and debuggers.< /P>

After reading this book, readers will be able to

  • Understand the role of rootkits in remote command/control and software eavesdropping
  • Build kernel rootkits that can make processes, files, and directories invisible
  • Master key rootkit programming techniques, including hooking, runtime patching, and directly manipulating kernel objects
  • Work with layered drivers to implement keyboard sniffers and file filters
  • Detect rootkits and build host-based intrusion prevention software that resists rootkit attacks

Le informazioni nella sezione "Riassunto" possono far riferimento a edizioni diverse di questo titolo.

I migliori risultati di ricerca su AbeBooks

1.

Hoglund, Greg; Butler, Jamie
Editore: Addison-Wesley Professional (2005)
ISBN 10: 0321294319 ISBN 13: 9780321294319
Nuovi Paperback Quantità: 1
Da
Irish Booksellers
(Rumford, ME, U.S.A.)
Valutazione libreria
[?]

Descrizione libro Addison-Wesley Professional, 2005. Paperback. Condizione libro: New. book. Codice libro della libreria 0321294319

Maggiori informazioni su questa libreria | Fare una domanda alla libreria

Compra nuovo
EUR 27,74
Convertire valuta

Aggiungere al carrello

Spese di spedizione: GRATIS
In U.S.A.
Destinazione, tempi e costi

2.

Hoglund, Greg/ Butler, James
Editore: Pearson P T R (2005)
ISBN 10: 0321294319 ISBN 13: 9780321294319
Nuovi Quantità: > 20
Da
Paperbackshop-US
(Commerce, GA, U.S.A.)
Valutazione libreria
[?]

Descrizione libro Pearson P T R, 2005. PAP. Condizione libro: New. New Book. Shipped from UK within 10 to 14 business days. Established seller since 2000. Codice libro della libreria PJ-9780321294319

Maggiori informazioni su questa libreria | Fare una domanda alla libreria

Compra nuovo
EUR 32,59
Convertire valuta

Aggiungere al carrello

Spese di spedizione: EUR 3,71
In U.S.A.
Destinazione, tempi e costi

3.

Greg Hoglund, Jamie Butler
Editore: Addison-Wesley Professional (2005)
ISBN 10: 0321294319 ISBN 13: 9780321294319
Nuovi Paperback Quantità: 1
Da
Ergodebooks
(RICHMOND, TX, U.S.A.)
Valutazione libreria
[?]

Descrizione libro Addison-Wesley Professional, 2005. Paperback. Condizione libro: New. Codice libro della libreria DADAX0321294319

Maggiori informazioni su questa libreria | Fare una domanda alla libreria

Compra nuovo
EUR 35,14
Convertire valuta

Aggiungere al carrello

Spese di spedizione: EUR 3,71
In U.S.A.
Destinazione, tempi e costi

4.

Hoglund, GregButler, Jamie
Editore: Prentice Hall
ISBN 10: 0321294319 ISBN 13: 9780321294319
Nuovi Quantità: > 20
Da
INDOO
(Avenel, NJ, U.S.A.)
Valutazione libreria
[?]

Descrizione libro Prentice Hall. Condizione libro: New. Brand New. Codice libro della libreria 0321294319

Maggiori informazioni su questa libreria | Fare una domanda alla libreria

Compra nuovo
EUR 38,75
Convertire valuta

Aggiungere al carrello

Spese di spedizione: EUR 3,25
In U.S.A.
Destinazione, tempi e costi

5.

Hoglund, Greg, Butler, Jamie
Editore: Addison-Wesley Professional (2005)
ISBN 10: 0321294319 ISBN 13: 9780321294319
Nuovi Paperback Quantità: 2
Da
Murray Media
(North Miami Beach, FL, U.S.A.)
Valutazione libreria
[?]

Descrizione libro Addison-Wesley Professional, 2005. Paperback. Condizione libro: New. Codice libro della libreria P110321294319

Maggiori informazioni su questa libreria | Fare una domanda alla libreria

Compra nuovo
EUR 42,14
Convertire valuta

Aggiungere al carrello

Spese di spedizione: EUR 2,78
In U.S.A.
Destinazione, tempi e costi

6.

Greg Hoglund
Editore: Pearson Education (2005)
ISBN 10: 0321294319 ISBN 13: 9780321294319
Nuovi Quantità: 1
Da
PBShop
(Wood Dale, IL, U.S.A.)
Valutazione libreria
[?]

Descrizione libro Pearson Education, 2005. PAP. Condizione libro: New. New Book.Shipped from US within 10 to 14 business days. Established seller since 2000. Codice libro della libreria IB-9780321294319

Maggiori informazioni su questa libreria | Fare una domanda alla libreria

Compra nuovo
EUR 42,14
Convertire valuta

Aggiungere al carrello

Spese di spedizione: EUR 3,71
In U.S.A.
Destinazione, tempi e costi

7.

Jamie Butler, Greg Hoglund
Editore: Pearson Education (US), United States (2005)
ISBN 10: 0321294319 ISBN 13: 9780321294319
Nuovi Paperback Quantità: 1
Da
The Book Depository
(London, Regno Unito)
Valutazione libreria
[?]

Descrizione libro Pearson Education (US), United States, 2005. Paperback. Condizione libro: New. 231 x 178 mm. Language: English . Brand New Book. It s imperative that everybody working in the field of cyber-security read this book to understand the growing threat of rootkits. --Mark Russinovich, editor, Windows IT Pro / Windows Magazine This material is not only up-to-date, it defines up-to-date. It is truly cutting-edge. As the only book on the subject, Rootkits will be of interest to any Windows security researcher or security programmer. It s detailed, well researched and the technical information is excellent. The level of technical detail, research, and time invested in developing relevant examples is impressive. In one word: Outstanding. --Tony Bautts, Security Consultant; CEO, Xtivix, Inc. This book is an essential read for anyone responsible for Windows security. Security professionals, Windows system administrators, and programmers in general will want to understand the techniques used by rootkit authors. At a time when many IT and security professionals are still worrying about the latest e-mail virus or how to get all of this month s security patches installed, Mr. Hoglund and Mr. Butler open your eyes to some of the most stealthy and significant threats to the Windows operating system. Only by understanding these offensive techniques can you properly defend the networks and systems for which you are responsible. --Jennifer Kolde, Security Consultant, Author, and Instructor What s worse than being owned? Not knowing it. Find out what it means to be owned by reading Hoglund and Butler s first-of-a-kind book on rootkits. At the apex the malicious hacker toolset--which includes decompilers, disassemblers, fault-injection engines, kernel debuggers, payload collections, coverage tools, and flow analysis tools--is the rootkit. Beginning where Exploiting Software left off, this book shows how attackers hide in plain sight. Rootkits are extremely powerful and are the next wave of attack technology. Like other types of malicious code, rootkits thrive on stealthiness. They hide away from standard system observers, employing hooks, trampolines, and patches to get their work done. Sophisticated rootkits run in such a way that other programs that usually monitor machine behavior can t easily detect them. A rootkit thus provides insider access only to people who know that it is running and available to accept commands. Kernel rootkits can hide files and running processes to provide a backdoor into the target machine. Understanding the ultimate attacker s tool provides an important motivator for those of us trying to defend systems. No authors are better suited to give you a detailed hands-on understanding of rootkits than Hoglund and Butler. Better to own this book than to be owned. --Gary McGraw, Ph.D., CTO, Cigital, coauthor of Exploiting Software (2004) and Building Secure Software (2002), both from Addison-Wesley Greg and Jamie are unquestionably the go-to experts when it comes to subverting the Windows API and creating rootkits. These two masters come together to pierce the veil of mystery surrounding rootkits, bringing this information out of the shadows. Anyone even remotely interested in security for Windows systems, including forensic analysis, should include this book very high on their must-read list. --Harlan Carvey, author of Windows Forensics and Incident Recovery (Addison-Wesley, 2005)Rootkits are the ultimate backdoor, giving hackers ongoing and virtually undetectable access to the systems they exploit. Now, two of the world s leading experts have written the first comprehensive guide to rootkits: what they are, how they work, how to build them, and how to detect them. s Greg Hoglund and James Butler created and teach Black Hat s legendary course in rootkits. In this book, they reveal never-before-told offensive aspects of rootkit technology--learn how attackers can get in and stay in for years, without detection. Hoglund and Butler show exactly how to subvert the Windows XP and Windows 2000 kernels, teaching concepts tha. Codice libro della libreria AAC9780321294319

Maggiori informazioni su questa libreria | Fare una domanda alla libreria

Compra nuovo
EUR 51,64
Convertire valuta

Aggiungere al carrello

Spese di spedizione: GRATIS
Da: Regno Unito a: U.S.A.
Destinazione, tempi e costi

8.

Jamie Butler, Greg Hoglund
Editore: Pearson Education (US), United States (2005)
ISBN 10: 0321294319 ISBN 13: 9780321294319
Nuovi Paperback Quantità: 1
Da
The Book Depository US
(London, Regno Unito)
Valutazione libreria
[?]

Descrizione libro Pearson Education (US), United States, 2005. Paperback. Condizione libro: New. 231 x 178 mm. Language: English . Brand New Book. It s imperative that everybody working in the field of cyber-security read this book to understand the growing threat of rootkits. --Mark Russinovich, editor, Windows IT Pro / Windows Magazine This material is not only up-to-date, it defines up-to-date. It is truly cutting-edge. As the only book on the subject, Rootkits will be of interest to any Windows security researcher or security programmer. It s detailed, well researched and the technical information is excellent. The level of technical detail, research, and time invested in developing relevant examples is impressive. In one word: Outstanding. --Tony Bautts, Security Consultant; CEO, Xtivix, Inc. This book is an essential read for anyone responsible for Windows security. Security professionals, Windows system administrators, and programmers in general will want to understand the techniques used by rootkit authors. At a time when many IT and security professionals are still worrying about the latest e-mail virus or how to get all of this month s security patches installed, Mr. Hoglund and Mr. Butler open your eyes to some of the most stealthy and significant threats to the Windows operating system. Only by understanding these offensive techniques can you properly defend the networks and systems for which you are responsible. --Jennifer Kolde, Security Consultant, Author, and Instructor What s worse than being owned? Not knowing it. Find out what it means to be owned by reading Hoglund and Butler s first-of-a-kind book on rootkits. At the apex the malicious hacker toolset--which includes decompilers, disassemblers, fault-injection engines, kernel debuggers, payload collections, coverage tools, and flow analysis tools--is the rootkit. Beginning where Exploiting Software left off, this book shows how attackers hide in plain sight. Rootkits are extremely powerful and are the next wave of attack technology. Like other types of malicious code, rootkits thrive on stealthiness. They hide away from standard system observers, employing hooks, trampolines, and patches to get their work done. Sophisticated rootkits run in such a way that other programs that usually monitor machine behavior can t easily detect them. A rootkit thus provides insider access only to people who know that it is running and available to accept commands. Kernel rootkits can hide files and running processes to provide a backdoor into the target machine. Understanding the ultimate attacker s tool provides an important motivator for those of us trying to defend systems. No authors are better suited to give you a detailed hands-on understanding of rootkits than Hoglund and Butler. Better to own this book than to be owned. --Gary McGraw, Ph.D., CTO, Cigital, coauthor of Exploiting Software (2004) and Building Secure Software (2002), both from Addison-Wesley Greg and Jamie are unquestionably the go-to experts when it comes to subverting the Windows API and creating rootkits. These two masters come together to pierce the veil of mystery surrounding rootkits, bringing this information out of the shadows. Anyone even remotely interested in security for Windows systems, including forensic analysis, should include this book very high on their must-read list. --Harlan Carvey, author of Windows Forensics and Incident Recovery (Addison-Wesley, 2005)Rootkits are the ultimate backdoor, giving hackers ongoing and virtually undetectable access to the systems they exploit. Now, two of the world s leading experts have written the first comprehensive guide to rootkits: what they are, how they work, how to build them, and how to detect them. s Greg Hoglund and James Butler created and teach Black Hat s legendary course in rootkits. In this book, they reveal never-before-told offensive aspects of rootkit technology--learn how attackers can get in and stay in for years, without detection. Hoglund and Butler show exactly how to subvert the Windows XP and Windows 2000 kernels, teaching concepts tha. Codice libro della libreria AAC9780321294319

Maggiori informazioni su questa libreria | Fare una domanda alla libreria

Compra nuovo
EUR 52,16
Convertire valuta

Aggiungere al carrello

Spese di spedizione: GRATIS
Da: Regno Unito a: U.S.A.
Destinazione, tempi e costi

9.

Greg Hoglund
Editore: Pearson Education (2005)
ISBN 10: 0321294319 ISBN 13: 9780321294319
Nuovi Quantità: 1
Da
Books2Anywhere
(Fairford, GLOS, Regno Unito)
Valutazione libreria
[?]

Descrizione libro Pearson Education, 2005. PAP. Condizione libro: New. New Book. Shipped from US within 10 to 14 business days. Established seller since 2000. Codice libro della libreria IB-9780321294319

Maggiori informazioni su questa libreria | Fare una domanda alla libreria

Compra nuovo
EUR 41,79
Convertire valuta

Aggiungere al carrello

Spese di spedizione: EUR 10,41
Da: Regno Unito a: U.S.A.
Destinazione, tempi e costi

10.

Hoglund, Greg; Butler, Jamie
Editore: Addison-Wesley Professional
ISBN 10: 0321294319 ISBN 13: 9780321294319
Nuovi PAPERBACK Quantità: 1
Da
Movie Mars
(Matthews, NC, U.S.A.)
Valutazione libreria
[?]

Descrizione libro Addison-Wesley Professional. PAPERBACK. Condizione libro: New. 0321294319 Brand New Book. Ships from the United States. 30 Day Satisfaction Guarantee!. Codice libro della libreria 4728287

Maggiori informazioni su questa libreria | Fare una domanda alla libreria

Compra nuovo
EUR 51,96
Convertire valuta

Aggiungere al carrello

Spese di spedizione: EUR 3,71
In U.S.A.
Destinazione, tempi e costi

Vedi altre copie di questo libro

Vedi tutti i risultati per questo libro