[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: Debian audititing tool?

On 00-12-21 Dan Hutchinson wrote:
> I would agree with your comments except the scan of the Linux Kernel.

Thanks. :)

>  You can use computer fornesics to scan the kernal against familiar trojan
> and virus patterns realitively quickly and at least identify problem

Hm, you know that some parts are written in ASM and that you could also
use ASM in some parts of the kernel to protect malicous code? How could
a fornesics (Hm, do you mean forensic?) detect this asm-code and know
that it is malicous?

Ein "Nein" ausgesprochen mit der tiefsten Überzeugung ist besser
und größer als ein "Ja" um zu gefallen oder noch schlimmer, um
Schwierigkeiten zu umgehen.
  -- Mahatma Gandhi

Reply to: