Rootkit Essays

In this leaflets I will be talking about how the network can be attacked, One way the network can be attacked is DOS and what this stands for is Denial of service, this attacks the network by overflowing the network with useless traffic, the result of this overflowing cause the network to slow down significantly, and even can crash the network if it overflows too much. The damage that is can do to a business is huge they can lose a lot of money to fix the issue. The weird thing is that the hacker

their sponsoring groups. Linux has antivirus and anti-malware systems. Some of these systems are designed to minimize the risk of Linux as a malware carrier between Microsoft systems. But such systems also address malware written for Linux, such as rootkits, Trojan horses, worms, and more. We need to administer a substantial number of systems, centralized system management tools such as the Red Hat Network, Canonicals’ Landscape, and Novell’s ZENworks

enterprise network without authorization from the network administrator. Rogue DHCP: Rogue DHCP stands for ¨Dynamic Host Configuration Protocol¨ server, it is a DHCP server on a network which is not under the administrative control of the network staff. Rootkit: It inject malware to the computer in order to get root access to computer or other device. Sandboxing: It is a computer security term referring to when a program is set aside from other programs in a separate environment so that if errors or security

2.0 LITERATURE REVIEW This chapter presents a review of literature that is related to computer and digital forensics. It begins by taking a look at the meaning of computer forensics and the different areas within this field. It also explores the forensic science process and the challenges facing practitioners. The chapter then discusses social networking and its relationship with cybercrime and the role of forensics in keeping user information private and secure. It concludes by reviewing the meaning

forensics community. 2.4 Challenges of Digital Forensics Digital technology evidence gathering and presentation presents challenges that are inherently different from other kinds of forensic investigations in other fields. Digital evidence is different from evidence that has been created, stored, transferred and reproduced from non-digital formats (Chaikin, 2004). In his study, he showed that the main difference between digital technology evidence and other forms of forensic science practice is

The operation was code name Buckshot Yankee. Operation Buckshot Yankee was the United States response to the terrorist attacks of 2008. Unlike the terrorists’ attack on 9/11, the attack on 2008 was a cyber-attack that affected the U.S Government’s unclassified and classified computer networks. The Deputy Secretary of Defense William J. Lynn III (2010) stated “It was a network administrator 's worst fear: a rogue program operating silently, poised to deliver operational plans into the hands of an

these techniques are combined and implemented. The future developments could also make use of other digital forensic tools like Prodiscover, Encase and also new computer forensic tools being developed currently in the industry. Defeating cross view rootkit detection tools in a generic

INTRODUCTION The Internet has become an important part of the daily life of many people. More and more people are making use of services that are present on the Internet. The Internet has evolved from a basic communication network to an interconnected set of information sources enabling, among other things, new forms of interactions and market places for the sale of services and products. Online banking or advertising are common examples of the commercial aspects of the Internet. Consider as in the