Analyzing Computer Security: A Threat / Vulnerability / Countermeasure Approach

8. The Root of All Evil

Chapter Spotlight

• Rootkits: stealthy and unchecked functionality

• Operating system design

• Separation of privilege

• Trusted systems

Background: Operating System Structure 333

Attack: Phone Rootkit 337

Attack Details: What Is a Rootkit? 338

Vulnerability: Software Complexity 347

Vulnerability: Difficulty of Detection and Eradication 347

Countermeasure: Simplicity of Design 348

Countermeasure: Trusted Systems 353

Conclusion 364

Exercises 365

Many attacks are silent and invisible: What good is an attack if the victim can see and perhaps counter it? As we described in Chapter 4, viruses, Trojan horses, and similar forms of malicious code may masquerade as harmless programs or attach themselves to other legitimate ...