资源描述：
《RootkitsWindows内核的安全防护电子版》由会员上传分享，免费在线阅读，更多相关内容在行业资料-天天文库。
1、Rootkits:SubvertingtheWindowsKernelByGregHoglund,JamesButler...............................................Publisher:AddisonWesleyProfessionalPubDate:July22,2005ISBN:0-321-29431-9Pages:352TableofContents
2、Index"It'simperativethateverybodyworkinginthefieldofcyber-securityreadthisb
3、ooktounderstandthegrowingthreatofrootkits."--MarkRussinovich,editor,WindowsITPro/Windows&.NETMagazine"Thismaterialisnotonlyup-to-date,itdefinesup-to-date.Itistrulycutting-edge.Astheonlybookonthesubject,RootkitswillbeofinteresttoanyWindowssecurityresearcherorsecurityprogrammer.It
4、'sdetailed,wellresearchedandthetechnicalinformationisexcellent.Theleveloftechnicaldetail,research,andtimeinvestedindevelopingrelevantexamplesisimpressive.Inoneword:Outstanding."--TonyBautts,SecurityConsultant;CEO,Xtivix,Inc."ThisbookisanessentialreadforanyoneresponsibleforWindow
5、ssecurity.Securityprofessionals,Windowssystemadministrators,andprogrammersingeneralwillwanttounderstandthetechniquesusedbyrootkitauthors.AtatimewhenmanyITandsecurityprofessionalsarestillworryingaboutthelateste-mailvirusorhowtogetallofthismonth'ssecuritypatchesinstalled,Mr.Hoglun
6、dandMr.ButleropenyoureyestosomeofthemoststealthyandsignificantthreatstotheWindowsoperatingsystem.Onlybyunderstandingtheseoffensivetechniquescanyouproperlydefendthenetworksandsystemsforwhichyouareresponsible."--JenniferKolde,SecurityConsultant,Author,andInstructor"What'sworsethan
7、beingowned?Notknowingit.FindoutwhatitmeanstobeownedbyreadingHoglundandButler'sfirst-of-a-kindbookonrootkits.Attheapexthemalicioushackertoolset--whichincludesdecompilers,disassemblers,fault-injectionengines,kerneldebuggers,payloadcollections,coveragetools,andflowanalysistools--is
8、therootkit.BeginningwhereExploitingSoftwareleftoff,thisbookshowshowattackershideinplainsight."Rootkitsareextremelypowerfulandarethenextwaveofattacktechnology.Likeothertypesofmaliciouscode,rootkitsthriveonstealthiness.Theyhideawayfromstandardsystemobservers,employinghooks,trampol
9、ines,andpatchestogettheirworkdone.Sophisticated
