Managed Code Rootkits: Hooking into Runtime Environments (Paperback)
暫譯: 管理代碼根套件:鉤入執行時環境 (平裝本)

Erez Metula

  • 出版商: Syngress Media
  • 出版日期: 2010-10-28
  • 定價: $1,650
  • 售價: 8.0$1,320
  • 語言: 英文
  • 頁數: 336
  • 裝訂: Paperback
  • ISBN: 1597495743
  • ISBN-13: 9781597495745
  • 相關分類: .NETAndroidJava 程式語言
  • 立即出貨 (庫存=1)

買這商品的人也買了...

商品描述

Imagine being able to change the languages for the applications that a computer is running and taking control over it. That is exactly what managed code rootkits can do when they are placed within a computer. This new type of rootkit is hiding in a place that had previously been safe from this type of attack-the application level. Code reviews do not currently look for back doors in the virtual machine (VM) where this new rootkit would be injected. An invasion of this magnitude allows an attacker to steal information on the infected computer, provide false information, and disable security checks. Erez Metula shows the reader how these rootkits are developed and inserted and how this attack can change the managed code that a computer is running, whether that be JAVA, .NET, Android Dalvik or any other managed code. Management development scenarios, tools like ReFrameworker, and countermeasures are covered, making this book a one stop shop for this new attack vector.



  • Introduces the reader briefly to managed code environments and rootkits in general
  • Completely details a new type of rootkit hiding in the application level and demonstrates how a hacker can change language runtime implementation
  • Focuses on managed code including Java, .NET, Android Dalvik and reviews malware development scanarios

商品描述(中文翻譯)

想像一下能夠改變電腦上運行的應用程式的語言並控制它。這正是管理代碼根套件(managed code rootkits)在被放置於電腦內時所能做到的。這種新型根套件隱藏在一個之前對此類攻擊安全的地方——應用程式層級。代碼審查目前並不會檢查虛擬機(VM)中的後門,而這正是新根套件將被注入的地方。如此規模的入侵使攻擊者能夠竊取受感染電腦上的信息、提供虛假信息並禁用安全檢查。Erez Metula 向讀者展示了這些根套件是如何開發和插入的,以及這種攻擊如何改變電腦運行的管理代碼,無論是 JAVA、.NET、Android Dalvik 還是其他任何管理代碼。本書涵蓋了管理開發場景、工具如 ReFrameworker 以及對策,使其成為針對這種新攻擊向量的一站式資源。

- 簡要介紹管理代碼環境和根套件的一般概念
- 完整詳細說明一種隱藏在應用程式層級的新型根套件,並演示黑客如何改變語言運行時實現
- 專注於管理代碼,包括 Java、.NET、Android Dalvik,並回顧惡意軟體開發場景