安全技术--rootkit

概念
root unix下的root用户，unix下最小安全限制的用户。
kit 工具箱
rootkit是一种特殊的恶意软件，它的功能是在安装的目标上隐藏自身及指定的文件、进程和网络链接等信息。比较常见的是和木马、后门等其他恶意程序一起使用。
rootkit三要素：隐藏、操纵、收集信息。
NSA对其的定义是：
A hacker security tool that captures passwords and message traffic to and from a computer. A collection of tools that allows a hacker to provide a backdoor into a system, collect information on other systems on the network,mask the fact that the system is compromised, and much more. Rootkit is a classic example of Trojan Horse software. Rootkit is available for a wide range of operating systems.