RE: Checking for backdoors in software products

["Rob Shein" <shoten () starpower net>]

Chkrootkit does nothing to detect backdoors in software; it looks for known
rootkits on unix systems, which are something entirely different.  What he's
looking for are backdoor access capabilities deliberately put in place by
the authors of the software (like when id Software put that backdoor in
their Doom multiplayer server all those years ago).

> -----Original Message-----
> From: Angel Todorov [mailto:atodorov () acm org] 
> Sent: Thursday, June 05, 2003 7:44 AM
> To: focus-ids () securityfocus com
> Subject: Re: Checking for backdoors in software products
>
>
>
> Hello Bojidar,
>
>       you can use chkrootkit if that software is written for 
> unix, and, if in some way it (possibly) modifies the system 
> executables.
>
>  
>
> On 4 Jun 2003 14:22:29 -0000
> "Bojidar Tzendov" <bojidar_tzendov () mtel net> wrote:
>
> > Dear All,
> >
> > A few software companies want we to distribute their 
> products abrpad. 
> > Do you know a system, software or methodology for checking that 
> > software products for possible backdoors?
> >
> > regards,
> > Bojidar
> ----------------------------------------------------------------------
> > ---------
> > INTRUSION PREVENTION: READY FOR PRIME TIME?
> >
> > IntruShield now offers unprecedented Intrusion IntelligenceTM 
> > capabilities
> > - including intrusion identification, relevancy, direction, 
> impact and analysis 
> > - enabling a path to prevention.
> >
> > Download the latest white paper "Intrusion Prevention: Myths, 
> > Challenges, and Requirements" at:
> > http://www.securityfocus.com/IntruVert-focus-ids2
> --------------------------------------------------------------
> -----------------
> >
>
> --------------------------------------------------------------
> -----------------
> INTRUSION PREVENTION: READY FOR PRIME TIME?
>
> IntruShield now offers unprecedented Intrusion IntelligenceTM 
> capabilities 
> - including intrusion identification, relevancy, direction, 
> impact and analysis 
> - enabling a path to prevention.
>
> Download the latest white paper "Intrusion Prevention: Myths, 
> Challenges, and Requirements" at: 
> http://www.securityfocus.com/IntruVert-focus-ids2
> --------------------------------------------------------------
> -----------------


-------------------------------------------------------------------------------
INTRUSION PREVENTION: READY FOR PRIME TIME?

IntruShield now offers unprecedented Intrusion IntelligenceTM capabilities
- including intrusion identification, relevancy, direction, impact and analysis
- enabling a path to prevention.

Download the latest white paper "Intrusion Prevention: Myths, Challenges, and Requirements" at:
http://www.securityfocus.com/IntruVert-focus-ids2
-------------------------------------------------------------------------------