You also want an ePaper? Increase the reach of your titles
YUMPU automatically turns print PDFs into web optimized ePapers that Google loves.
Design Goal != Implementation<br />
Don’t associate rootkits with a specific tactic:<br />
A rootkit can offer C2 → without using an IRC channel<br />
A rootkit can monitor → without directly accessing hardware<br />
A rootkit can be stealthy → without overtly hiding system objects<br />
Not all rootkits communicate over IRC,<br />
Or access hardware,<br />
© <strong>Below</strong> <strong>Gotham</strong> <strong>Labs</strong>, 2009<br />
Or hide objects…<br />
5
Change language