"It's important that everyone who works in the field of cyber-security read this book to understand the threat of rootkits." - Mark Russinovich, editor, Windows IT Pro / Windows & Magazines. NET "This material is not only up-to-date, it defines up-to-date:. Because the only book on a subject, Rootkits will be of interest to any Windows security researcher or security programmer said. In one position." - Bautts Tony, Security Consultant, CEO, Xtivix, Inc. "This book is an essential read for anyone responsible for Windows security. Security professionals, Windows system administrators, and programmers in general will want to understand the techniques used by rootkit authors Find out what it means owned by reading Hoglund and Butler. First-books -a-kind of rootkit Kernel rootkits can. hide files and running processes to provide a backdoor into the target machine. "Understanding the main attacker tool that provides an important motivator for us to try to maintain the system. No writer better suited to provide detailed hands-on understanding of rootkits than Hoglund and Butler. It is better to have this book rather than possessed." - Gary McGraw, Ph.D., CTO, Cigital, coauthor of Exploiting Software (2004) and Building Secure Software (2002), both from Addison-Wesley "Greg and Jamie are unquestionably the go-to expert when it comes ke subvert the Windows API and creating rootkits. Any person even remotely interested in security for Windows systems, including forensic analysis, should include books that are very high on their must-read list. " - Harlan Carvey, author of Windows Forensics and Incident Recovery (Addison-Wesley, 2005) A rootkit is a major backdoor, giving hackers ongoing and virtually undetectable access to the systems they exploit. In this book, they reveal never-before-told offensive aspects of rootkit technology - learn how an attacker can enter and stay in for years, without detection. Hoglund and Butler show exactly how to subvert Windows XP and Windows 2000 kernels, teaching concepts that are easy to apply to almost all modern operating systems, from Windows Server 2003 for Linux and UNIX. Using the example download area, they teach rootkit programming techniques that can be used for a variety of software, from security tools, white hat for the driver and the operating system debugger. After reading this book, readers will be able to Understanding the role of rootkits in remote command / control and kernel rootkits eavesdroppingBuild software that can make processes, files, and directories invisibleMaster key rootkit programming techniques, including linking, runtime patching, and directly manipulating kernel objectsWork with layered drivers to implement keyboard sniffers and file filtersDetect rootkits and build host-based intrusion prevention software that bear rootkit attacks Visit rootkit.com for code and programs from this book.