|
|
 |
남은수량 0 권 |
 |
|
|
|
 |
판매가 |
151,130원 → 139,040원  8% |
|
|
마일리지 |
 0% 0원 |
|
|
발행일 |
2012-03-16 | 중량: 1.06 kg
|
|
ISBN |
144962636X |
9781449626365
|
|
기타정보 |
원서 | 784쪽
| $ 107.95
| Paperback
|
|
|
예상입고일
|
7~12일 소요예정 (근무일기준) |
|
배송비 |
무료배송
|
| |
|
정가, 판매가는 항공 운임료 포함 |
|
|
|
 |
| 네트워킹
|
|
|
|
|
|
주의사항 |
- 현지사정에 의해 지연, 품절 될 수 있습니다.- 해외주문원서는 취소 및 반품이 불가능합니다.(단, 파본이나 오발송은 제외 입니다.)- 수입절차/입고소요기간 자세히 |
|
|
 |
|
Publisher Marketing
While Forensic Analysis Has Proven To Be A Valuable Investigative Tool In The Field Of Computer Security, Utilizing Anti-Forensic Technology Makes It Possible To Maintain A Covert Operational Foothold For Extended Periods, Even In A High-Security Environment. Adopting An Approach That Favors Full Disclosure, The Updated Second Edition Of The Rootkit Arsenal Presents The Most Accessible, Timely, And Complete Coverage Of Forensic Countermeasures. This Book Covers More Topics, In Greater Depth, Than Any Other Currently Available. In Doing So The Author Forges Through The Murky Back Alleys Of The Internet, Shedding Light On Material That Has Traditionally Been Poorly Documented, Partially Documented, Or Intentionally Undocumented.
The Range Of Topics Presented Includes How To:
-Evade Post-Mortem Analysis
-Frustrate Attempts To Reverse Engineer Your Command & Control Modules
-Defeat Live Incident Response
-Undermine The Process Of Memory Analysis
-Modify Subsystem Internals To Feed Misinformation To The Outside
-Entrench Your Code In Fortified Regions Of Execution
-Design And Implement Covert Channels
-Unearth New Avenues Of Attack
Key Features
-.Offers exhaustive background material on the Intel platform and Windows Internals
-.Covers stratagems and tactics that have been used by botnets to harvest sensitive data
-.Includes working proof-of-concept examples, implemented in the C programming language
-.Heavily annotated with references to original sources
|
 |
|
 |
Table of Contents
Part I Foundation
Chapter 1 Empty Cup Mind
Chapter 2 Anti-Forensics Overview
Chapter 3 Hardware Briefing
Chapter 4 System Software Briefing
Chapter 5 Tools of the Trade
Chapter 6 Life in Kernel Space
Part II Post-Mortem
Chapter 7 Defeating Disk Analysis
Chapter 8 Foiling Executable Analysis
Part III Live Response
Chapter 9 Defeating Live Response
Chapter 10 Shellcode
Chapter 11 Modifying Call Tables
Chapter 12 Modifying Code
Chapter 13 Modifying Objects Kernel
Chapter 14 Covert Channels
Chapter 15 Going Out-of-Band
Part IV Summation
Chapter 16 The Tao of Rootkits
|
|
|
 |
Contributor Bio: Blunden, Bill
Bluden has a bachelor's degree in physics from Cornell and a master's degree in operations research. He has spent the last 10 years performing R & D on enterprise middleware, implementing distributed computing software, and working with security protocols.
Bill Blunden
Bill Blunden (MCSE, MCITP: Enterprise Administrator) began his journey into enterprise computing over ten years ago at an insurance company in Cleveland, Ohio. Gradually forging a westward path to Northern California, he’s worked with ERP middleware, developed code for network security appliances, and taken various detours through academia. Bill is the principal investigator at Below Gotham Labs.
|
|
|
|
|
|
|
|
|
|
|
|
|
Home > 
POD(Printed On Demand)
