什么是rootkiT扫描（What is a rootkiT scan）.docVIP

什么是rootkiT扫描（What is a rootkiT scan） [edit this section] what is the rootkit 在网络安全中经常会遇到rootkit，NSA安全和入侵检测术语字典( NSA Glossary of Terms Used in Security and Intrusion Detection)对rootkit的定义如下：A hacker security tool that captures passwords and message traffic to and from a computer. A collection of tools that allows a hacker to provide a backdoor into a system, collect information on other systems on the network,mask the fact that the system is compromised, and much more. Rootkit is a classic example of Trojan Horse software. Rootkit is available for a wide range of operating systems. 　　好多人有一个误解，他们认为rootkit是用作获得系统root访问权限的工具。 In fact, rootkit is a tool for attackers to hide their tracks and retain root access. In general, the attacker gains root access through a remote attack, or the first password guessing or password decoding to gain access to the system. After entering the system, if he has not received root permission, the root authority of the system is obtained through some security vulnerabilities. Then, the attacker will install rootkit in invasion of host, and then he will often through the back door of the rootkit to check whether there is other user login system, if only oneself, the attacker will set out to clean up the log information. After the rootkit sniffer gets users and passwords from other systems, the attacker USES that information to hack into other systems. [edit this section] the function of rootkit The earliest Rootkit used for good purposes, but then Rootkit by hackers use on intrusion and attack other peoples computer systems, computer viruses, spyware, etc are also often use Rootkit to hide, so Rootkit has been most anti-virus software is classified as dangerous malware. Operating systems such as Linux, Windows and Mac OS have the opportunity to be targeted by Rootkit. The [1] Rootkit appeared in the early 1990s and first used the term Rootkit in a security advisory report in February 1994. The security consulting is CERT - CC CA - 1994-01, t