Imagen 1 de 1
Galería
Imagen 1 de 1
¿Quieres vender uno?
Rootkits: Subverting the Windows Kernel by Hoglund, Greg; Butler, Jamie
by Hoglund, Greg; Butler, Jamie | PB | Good
USD5,60
Aproximadamente4,84 EUR
Estado:
“Pages can have notes/highlighting. Spine may show signs of wear. ~ ThriftBooks: Read More, ”... Más informaciónacerca del estado
En buen estado
Libro que se ha leído pero que está en buen estado. Daños mínimos en la tapa, incluidas rozaduras, pero sin roturas ni agujeros. Es posible que no incluya sobrecubierta para tapas duras. Tapa muy poco desgastada. La mayoría de las páginas están en buen estado con muy pocas arrugas o roturas. El texto subrayado a lápiz es prácticamente inexistente, no hay texto resaltado ni anotaciones en los márgenes. No faltan páginas. Consulta el anuncio del vendedor para obtener más información y la descripción de cualquier posible imperfección.
5 disponibles1 vendido
- ¡Cómpralo ya!Rootkits: Subverting the Windows Kernel by Hoglund, Greg; Butler, Jamie
Oops! Looks like we're having trouble connecting to our server.
Refresh your browser window to try again.
Envío:
Gratis Economy Shipping.
Ubicado en: Aurora, Illinois, Estados Unidos
Entrega:
Entrega prevista entre el sáb. 9 ago. y el mié. 13 ago. a 94104
Devoluciones:
30 días para devoluciones. El vendedor paga el envío de la devolución.
Pagos:
Compra con confianza
El vendedor asume toda la responsabilidad de este anuncio.
N.º de artículo de eBay:196820381955
Última actualización el 28 jun 2025 08:13:21 H.EspVer todas las actualizacionesVer todas las actualizaciones
Características del artículo
- Estado
- En buen estado
- Notas del vendedor
- Binding
- Paperback
- Book Title
- Rootkits
- Weight
- 1 lbs
- Product Group
- Book
- IsTextBook
- No
- ISBN
- 9780321294319
Acerca de este producto
Product Identifiers
Publisher
Addison Wesley Professional
ISBN-10
0321294319
ISBN-13
9780321294319
eBay Product ID (ePID)
46603488
Product Key Features
Number of Pages
352 Pages
Publication Name
Rootkits : Subverting the Windows Kernel
Language
English
Subject
Operating Systems / General, Networking / Vendor Specific, Security / General
Publication Year
2005
Type
Textbook
Subject Area
Computers
Format
Trade Paperback
Dimensions
Item Height
1 in
Item Weight
20.8 Oz
Item Length
9 in
Item Width
7 in
Additional Product Features
Intended Audience
Scholarly & Professional
LCCN
2005-013061
Dewey Edition
22
Illustrated
Yes
Dewey Decimal
005.8
Table Of Content
Preface. Acknowledgments. About the Authors. About the Cover. 1. Leave No Trace. Understanding Attackers'' Motives. What Is a Rootkit? Why Do Rootkits Exist? How Long Have Rootkits Been Around? How Do Rootkits Work? What a Rootkit Is Not. Rootkits and Software Exploits. Offensive Rootkit Technologies. Conclusion. 2. Subverting the Kernel. Important Kernel Components. Rootkit Design. Introducing Code into the Kernel. Building the Windows Device Driver. Loading and Unloading the Driver. Logging the Debug Statements. Fusion Rootkits: Bridging User and Kernel Modes. Loading the Rootkit. Decompressing the .sys File from a Resource. Surviving Reboot. Conclusion. 3. The Hardware Connection. Ring Zero. Tables, Tables, and More Tables. Memory Pages. The Memory Descriptor Tables. The Interrupt Descriptor Table. The System Service Dispatch Table. The Control Registers. Multiprocessor Systems. Conclusion. 4. The Age-Old Art of Hooking. Userland Hooks. Kernel Hooks. A Hybrid Hooking Approach. Conclusion. 5. Runtime Patching. Detour Patching. Jump Templates. Variations on the Method. Conclusion. 6. Layered Drivers. A Keyboard Sniffer. The KLOG Rootkit: A Walk-through. File Filter Drivers. Conclusion. 7. Direct Kernel Object Manipulation. DKOM Benefits and Drawbacks. Determining the Version of the Operating System. Communicating with the Device Driver from Userland. Hiding with DKOM. Token Privilege and Group Elevation with DKOM. Conclusion. 8. Hardware Manipulation. Why Hardware? Modifying the Firmware. Accessing the Hardware. Example: Accessing the Keyboard Controller. How Low Can You Go? Microcode Update. Conclusion. 9. Covert Channels. Remote Command, Control, and Exfiltration of Data. Disguised TCP/IP Protocols. Kernel TCP/IP Support for Your Rootkit Using TDI. Raw Network Manipulation. Kernel TCP/IP Support for Your Rootkit Using NDIS. Host Emulation. Conclusion. 10. Rootkit Detection. Detecting Presence. Detecting Behavior. Conclusion. Index.
Synopsis
"It's imperative that everybody working in the field of cyber-security read this book to understand the growing threat of rootkits." --Mark Russinovich, editor, Windows IT Pro / Windows & .NET Magazine "This material is not only up-to-date, it defines up-to-date. It is truly cutting-edge. As the only book on the subject, Rootkits will be of interest to any Windows security researcher or security programmer. It's detailed, well researched and the technical information is excellent. The level of technical detail, research, and time invested in developing relevant examples is impressive. In one word: Outstanding." --Tony Bautts, Security Consultant; CEO, Xtivix, Inc. "This book is an essential read for anyone responsible for Windows security. Security professionals, Windows system administrators, and programmers in general will want to understand the techniques used by rootkit authors. At a time when many IT and security professionals are still worrying about the latest e-mail virus or how to get all of this month's security patches installed, Mr. Hoglund and Mr. Butler open your eyes to some of the most stealthy and significant threats to the Windows operating system. Only by understanding these offensive techniques can you properly defend the networks and systems for which you are responsible." --Jennifer Kolde, Security Consultant, Author, and Instructor "What's worse than being owned? Not knowing it. Find out what it means to be owned by reading Hoglund and Butler's first-of-a-kind book on rootkits. At the apex the malicious hacker toolset--which includes decompilers, disassemblers, fault-injection engines, kernel debuggers, payload collections, coverage tools, and flow analysis tools--is the rootkit. Beginning where Exploiting Software left off, this book shows how attackers hide in plain sight. "Rootkits are extremely powerful and are the next wave of attack technology. Like other types of malicious code, rootkits thrive on stealthiness. They hide away from standard system observers, employing hooks, trampolines, and patches to get their work done. Sophisticated rootkits run in such a way that other programs that usually monitor machine behavior can't easily detect them. A rootkit thus provides insider access only to people who know that it is running and available to accept commands. Kernel rootkits can hide files and running processes to provide a backdoor into the target machine. "Understanding the ultimate attacker's tool provides an important motivator for those of us trying to defend systems. No authors are better suited to give you a detailed hands-on understanding of rootkits than Hoglund and Butler. Better to own this book than to be owned." --Gary McGraw, Ph.D., CTO, Cigital, coauthor of Exploiting Software (2004) and Building Secure Software (2002), both from Addison-Wesley "Greg and Jamie are unquestionably the go-to experts when it comes to subverting the Windows API and creating rootkits. These two masters come together to pierce the veil of mystery surrounding rootkits, bringing this information out of the shadows. Anyone even remotely interested in security for Windows systems, including forensic analysis, should include this book very high on their must-read list." --Harlan Carvey, author of Windows Forensics and Incident Recovery (Addison-Wesley, 2005) Rootkits are the ultimate backdoor, giving hackers ongoing and virtually undetectable access to the systems they exploit. Now, two of the world's leading experts have written the first comprehensive guide to rootkits: what they are, how they work, how to build them, and how to detect them. Rootkit.com's Greg Hoglund and James Butler created and teach Black Hat's legendary course in rootkits. In this book, they reveal never-before-told offensive aspects of rootkit technology--learn how attackers can get in and stay in for years, without
LC Classification Number
QA76.9.A25H637 2005
Descripción del artículo del vendedor
Información de vendedor profesional
Acerca de este vendedor
ThriftBooks
98,9% de votos positivos•19,7 millones artículos vendidos
Registrado como vendedor profesional
Votos de vendedor (5.698.272)
- c***m (422)- Votos emitidos por el comprador.Últimos 6 mesesCompra verificadaWOW!; I cannot believe this 3 Days to Hawaii! ; AAA+++; Excellent Service; Great Pricing; Fast Delivery-Faster Than Expected to Hawaii!; Shipped 05/05, Mon, Received 05/08, Thu to Hawaii using free shipping; USPS Ground Mail, Book in Excellent Condition--Better Than Described ; TLC Packaging; Excellent Seller Communication, Sends updates . Highly Recommended!, Thank you very much!The Internment of Japanese Americans During World War II (#146005407795)
- v***v (2061)- Votos emitidos por el comprador.Mes pasadoCompra verificadaAlthough this book was not as described, with no picture of it in the listing, the seller communicated well and quickly gave me a full refund while letting me keep it. The minimal packaging left the book a bit vulnerable (typical for ThriftBooks), but it did arrive safely and timely. As usual, it’s hit or miss with this seller, but often times you can get great values, and their customer service is always very good. Many other sellers with millions of transactions don’t even communicate.
- 2***j (113)- Votos emitidos por el comprador.Mes pasadoCompra verificadaI've ordered several items from this vendor now and they've always been what they were advertised as. This was no exception. Both discs were in great shape as well as their jewel cases. Delivery is good, packaging is simple but effective for what you're paying and I haven't had any get damaged. Will keep buying from this vendor because of the results so far and good prices, too.
ThriftBooks
98,9% de votos positivos•19,7 millones artículos vendidos
Registrado como vendedor profesional
Votos de vendedor (5.698.272)
- c***m (422)- Votos emitidos por el comprador.Últimos 6 mesesCompra verificadaWOW!; I cannot believe this 3 Days to Hawaii! ; AAA+++; Excellent Service; Great Pricing; Fast Delivery-Faster Than Expected to Hawaii!; Shipped 05/05, Mon, Received 05/08, Thu to Hawaii using free shipping; USPS Ground Mail, Book in Excellent Condition--Better Than Described ; TLC Packaging; Excellent Seller Communication, Sends updates . Highly Recommended!, Thank you very much!The Internment of Japanese Americans During World War II (#146005407795)
- v***v (2061)- Votos emitidos por el comprador.Mes pasadoCompra verificadaAlthough this book was not as described, with no picture of it in the listing, the seller communicated well and quickly gave me a full refund while letting me keep it. The minimal packaging left the book a bit vulnerable (typical for ThriftBooks), but it did arrive safely and timely. As usual, it’s hit or miss with this seller, but often times you can get great values, and their customer service is always very good. Many other sellers with millions of transactions don’t even communicate.
- 2***j (113)- Votos emitidos por el comprador.Mes pasadoCompra verificadaI've ordered several items from this vendor now and they've always been what they were advertised as. This was no exception. Both discs were in great shape as well as their jewel cases. Delivery is good, packaging is simple but effective for what you're paying and I haven't had any get damaged. Will keep buying from this vendor because of the results so far and good prices, too.