First, invasion
Along with Internet on Linux main engine's increase, more and more security cracks discovered on the current GNU/Linux system. Perhaps you had heard on Internet discovers bug under Linux, it will cause the system very easily by the hacker attack.
Because Linux is an open code system, the crack is very easy to discover
King of ACDSee 6.0 application comprehensive work numerical code photograph picture arrow quantification and artistic treatment map-read
Six days learn Visual the Basic database programming analysis “the shake wave” the malignant worm virus
, and very quick will also have the patch to come out. But when the crack has not announced that and the manager is very lazy, has not gone to have the patch. Hacker very easy attack this system, to obtain the root jurisdiction, under existing GNU/Linux, he may handle the matter which any he wants to do. Now you may ask that what now we can make?
1.1 present's GNU/Linux mistakes in where?
The super user meets the abuse of power, he can handle the matter which possesses him to do. As root. He will change all things.
Many system files are very easy to change. These documents are possibly the very important documents, if /bin/login, if an hacker enters, he may upload a login procedure to make a round trip covers /bin/login, like this he may not use the debarkation name and the password lands the system. But these documents do not need to modify frequently, only if you must promote the system.
Module modules is very easy to use for to interrupt the essence. The module is to let the Linux essence module words and more highly effective designs. But when the module joins the essence, it will become the essence a part, and can do the work which the primitive essence can do. Therefore, some unfriendly code might write the module to join to the essence, these code heavy orientation system will transfer, and took a virus to move.
The advancement is not protected, some advancements, if the backstage web server, has thought does not have the strict protection procedure. Therefore, they will be very easy by the hacker attack.
1.2 LIDS tentative plans are anything.
Protects the important document. Because the document is very easy by the root change, why not strict file operation? Therefore, LIDS changed filing system's in essence safety system transfer. If some time some people visit a document, he will enter system call then us to be possible to inspect the filename, and looked whether they are protected. If it were already protected, we may reject this visitor's request.
Protects the important advancement. This and the above protection advancement's idea is not same. When in a system moves an advancement, it will have one in the /proc filing system to take the way name with pid the entrance. Therefore, if you use “ps - axf” you to be possible to demonstrate the current movement the advancement. You may ask, if protects these advancements. If you must kill advancement, first, you enter “ps” to obtain advancement PID, then, you enter “kill <pid>” to kill it. But, if I do not let you see the advancement, how you do kill this advancement? Therefore, LIDS is protects it with the hideaway advancement.
Other pages: : 1 * 2 * 3 * 4 * 5 * 6 * 7 * Next>>
|
You are here: hacking technology
> invades the examination
> Content
Category: Home
> invades the examination