New article announcement: Detecting Rootkits And Kernel-level Compromises In Linux

[Daniel Hanson <dhanson () securityfocus com>]

The following article was published on Symantec's SecurityFocus today:

Detecting Rootkits And Kernel-level Compromises In Linux
by Mariusz Burdach  November 18, 2004

This article outlines useful ways of detecting hidden modifications to a
Linux kernel. Often known as rootkits, these stealthy types of malware
are installed in the kernel and require special techniques by Incident
handlers and Linux system administrators to be detected.

http://www.securityfocus.com/infocus/1811