<
http://www.networkmagazine.com/shared/article/showArticle.jhtml?
articleId=55301844&classroom=>
html mail to keep line from wrapping - sorry
Interesting magazine - this month has a number of articles that I
thought were interesting but this one caught my attention. Suggests that
the day of the rootkit and 'poisoned' ls, ps etc. is/will be replaced
with kernel modules that at the kernel level, can evade detection by
typical security tools such as tripwire and at kernel level, can scrub
itself from processes showing in things like top and ps.
Seems as though the stakes of security administration is rising above
and beyond the merely intelligent.
Craig
(text/plain)