Whether you want to learn how to develop a robust, full-featured
rootkit or you''re looking for effective ways to prevent one from
being installed on your network, this hands-on resource provides
you with the tools you''ll need. Expert developer Ric Vieler walks
you through all of the capabilities of rootkits, the technology
they use, steps for developing and testing them, and the detection
methods to impede their distribution.
This book provides the detailed, step-by-step instructions and
examples required to produce full-featured, robust rootkits.
Presented in modular sections, source code from each chapter can be
used separately or together to produce highlyspecific
functionality. In addition, Vieler details the loading,
configuration, and control techniques used to deploy rootkits. All
ancillary software is fully detailed with supporting source code
and links to the compilers, utilities, and scripts necessary to
build and run every example provided.
What you will learn from this book
- Complete coverage of all major rootkit technologies: kernel
hooks, process injection, I/O filtering, I/O control, memory
management, process synchronization, TDI communication, network
filtering, email filtering, key logging, process hiding, device
driver hiding, registry key hiding, directory hiding and more
- Complete coverage of the compilers, kits, utilities, and tools
required to develop robust rootkits
- Techniques for protecting your system by detecting a rootkit
before it''s installed
- Ways to create modular, commercial grade software
Who this book is for
This book is for anyone who is involved in software development
or computer security.
Wrox Professional guides are planned and
written by working programmers to meet the real-world needs of
programmers, developers, and IT professionals. Focused and
relevant, they address the issues technology professionals face
every day. They provide examples, practical solutions, and expert
education in new technologies, all designed to help programmers do
a better job.