# RootPrompt.org   Nothing but Unix.[Home] [Features] [Programming] [Mac OS X] [Search]

 Being Hacked is a Lot Like Being Haunted?

Jay Beale (from Bastille Linux) answers the questions "How can I determine if my Linux server has been hacked? How can I be sure that I haven't been hacked?" in a new column at Information Security Magazine. He observes that, "being hacked is a lot like being haunted--odd things are afoot that you may or may not notice." He talks about Tripwire, but also discusses how atackers defeat Tripwire with kernel level rootkits. The column then goes on to talk about how you might detect some rootkits with chkrootkit or even bypass them entirely. It even discusses detecting backdoors with NMAP and the impossibility of answering either of these questions with certainty.

 (Submitted by Anonymous Fri Feb 14, 2003 )


Our content can be syndicated: Main page Mac Page

Copyright 1999-2005 Noel Davis. Noel also runs web sites about sailing and kayaking.
All trademarks are the property of their owners.
All articles are owned by their author