Rootkits: Subverting the Windows Kernel

"Install a rootkit on someone’s system, and you own it. Not just now: indefinitely, because rootkits are virtually undetectable. Their power and stealthiness may make them the most dangerous form of malware ever created. You’d think you’d have heard more about them, but very few people really understand rootkit technology. To become one of them, read Rootkits: Subverting the Windows Kernel.

For years, the best way to learn about rootkits has been to take Greg Hoglund and James Butler’s course at Black Hat, the legendary annual hacker event. Now, for those who can’t make it to Vegas, Hoglund and Butler have organized their unique knowledge into this book. Notwithstanding its title, its principles apply to any operating system, including Linux and Unix. The authors focus on kernel rootkits, the hardest kind to detect. While it’s written primarily from an attacker’s perspective, it’ll be valuable to attackers, defenders, and researchers alike."

Turning the Information Superhighway into the Information Trailer Park, one machine at a time since 1980.