Managed Code Rootkits : Hooking Into Runtime Environments

Erez Metula

ISBN 10: 1597495743 / ISBN 13: 9781597495745

Published by Elsevier Science, 2010

About this Item

nach der Bestellung gedruckt Neuware - Printed after ordering - Managed Code Rootkits is the first book to cover application-level rootkits and other types of malware inside the application VM, which runs a platform-independent programming environment for processes. The book, divided into four parts, points out high-level attacks, which are developed in intermediate language. The initial part of the book offers an overview of managed code rootkits. It explores environment models of managed code and the relationship of managed code to rootkits by studying how they use application VMs. It also discusses attackers of managed code rootkits and various attack scenarios. The second part of the book covers the development of managed code rootkits, starting with the tools used in producing managed code rootkits through their deployment. The next part focuses on countermeasures that can possibly be used against managed code rootkits, including technical solutions, prevention, detection, and response tactics. The book concludes by presenting techniques that are somehow similar to managed code rootkits, which can be used in solving problems.

Seller Inventory # 9781597495745

Bibliographic Details

• Title: Managed Code Rootkits : Hooking Into Runtime Environments
• Publisher: Elsevier Science
• Publication Date: 2010
• Language: English
• ISBN 10: 1597495743
• ISBN 13: 9781597495745
• Binding: Taschenbuch
• Condition: Neu
• Dimensions: 234W x 190H x 25D millimeters 234 millimeters width by 190 millimeters height by 25 millimeters depth
• Weight: 686 grams

About this title

Synopsis

Managed Code Rootkits is the first book to cover application-level rootkits and other types of malware inside the application VM, which runs a platform-independent programming environment for processes. The book, divided into four parts, points out high-level attacks, which are developed in intermediate language.

The initial part of the book offers an overview of managed code rootkits. It explores environment models of managed code and the relationship of managed code to rootkits by studying how they use application VMs. It also discusses attackers of managed code rootkits and various attack scenarios. The second part of the book covers the development of managed code rootkits, starting with the tools used in producing managed code rootkits through their deployment.

The next part focuses on countermeasures that can possibly be used against managed code rootkits, including technical solutions, prevention, detection, and response tactics. The book concludes by presenting techniques that are somehow similar to managed code rootkits, which can be used in solving problems.

• Named a 2011 Best Hacking and Pen Testing Book by InfoSec Reviews
• Introduces the reader briefly to managed code environments and rootkits in general
• Completely details a new type of rootkit hiding in the application level and demonstrates how a hacker can change language runtime implementation
• Focuses on managed code including Java, .NET, Android Dalvik and reviews malware development scanarios

About the Author

Erez Metula (CISSP) is an application security researcher specializing in secure development practices, penetration testing, code reviews, and security training for developers. He has extensive hands-on experience performing security assessments and training for organizations worldwide. Erez is the founder of AppSec. He is also a leading instructor at many information security training sessions. He is a constant speaker at security conferences, and has spoken at Black Hat, DEF CON, CanSecWest, OWASP, and more.