Zum Hauptinhalt springen Zur Suche springen Zur Hauptnavigation springen
Beschreibung
A Guide to Kernel Exploitation: Attacking the Core discusses the theoretical techniques and approaches needed to develop reliable and effective kernel-level exploits, and applies them to different operating systems, namely, UNIX derivatives, Mac OS X, and Windows. Concepts and tactics are presented categorically so that even when a specifically detailed vulnerability has been patched, the foundational information provided will help hackers in writing a newer, better attack; or help pen testers, auditors, and the like develop a more concrete design and defensive structure.

The book is organized into four parts. Part I introduces the kernel and sets out the theoretical basis on which to build the rest of the book. Part II focuses on different operating systems and describes exploits for them that target various bug classes. Part III on remote kernel exploitation analyzes the effects of the remote scenario and presents new techniques to target remote issues. It includes a step-by-step analysis of the development of a reliable, one-shot, remote exploit for a real vulnerabilitya bug affecting the SCTP subsystem found in the Linux kernel. Finally, Part IV wraps up the analysis on kernel exploitation and looks at what the future may hold.
A Guide to Kernel Exploitation: Attacking the Core discusses the theoretical techniques and approaches needed to develop reliable and effective kernel-level exploits, and applies them to different operating systems, namely, UNIX derivatives, Mac OS X, and Windows. Concepts and tactics are presented categorically so that even when a specifically detailed vulnerability has been patched, the foundational information provided will help hackers in writing a newer, better attack; or help pen testers, auditors, and the like develop a more concrete design and defensive structure.

The book is organized into four parts. Part I introduces the kernel and sets out the theoretical basis on which to build the rest of the book. Part II focuses on different operating systems and describes exploits for them that target various bug classes. Part III on remote kernel exploitation analyzes the effects of the remote scenario and presents new techniques to target remote issues. It includes a step-by-step analysis of the development of a reliable, one-shot, remote exploit for a real vulnerabilitya bug affecting the SCTP subsystem found in the Linux kernel. Finally, Part IV wraps up the analysis on kernel exploitation and looks at what the future may hold.
Über den Autor
Enrico Perla currently works as a kernel programmer at Oracle. He received his [...]. in Computer Science from the University of Torino, and his [...]. in Computer Science from Trinity College Dublin. His interests range from low-level system programming to low-level system attacking, exploiting, and exploit countermeasures.
Inhaltsverzeichnis
Part I: A Journey to Kernel-Land
1. From User-Land to Kernel-Land Attacks
2. A Taxonomy of Kernel Vulnerabilities
3. Stairway to Successful Kernel Exploitation

Part II: The UNIX Family, Mac OS X, and Windows
4. The UNIX Family
5. Mac OS X
6. Windows

Part III: Remote Kernel Exploitation
7. Facing the Challenges of Remote Kernel Exploitation
8. Putting It All Together: A Linux Case Study

Part IV: Final Words
9. Kernel Evolution: Future Forms of Attack and Defense
Details
Erscheinungsjahr: 2010
Genre: Importe, Informatik
Rubrik: Naturwissenschaften & Technik
Medium: Taschenbuch
Inhalt: Kartoniert / Broschiert
ISBN-13: 9781597494861
ISBN-10: 1597494860
Sprache: Englisch
Einband: Kartoniert / Broschiert
Autor: Perla, Enrico
Oldani, Massimiliano
Hersteller: Syngress Media,U.S.
Verantwortliche Person für die EU: Libri GmbH, Europaallee 1, D-36244 Bad Hersfeld, gpsr@libri.de
Maße: 233 x 191 x 28 mm
Von/Mit: Enrico Perla (u. a.)
Erscheinungsdatum: 28.10.2010
Gewicht: 0,811 kg
Artikel-ID: 101033052

Ähnliche Produkte