Attempted attack on Linux kernel foiled

TalkBack 51 of 73:

Next »

« Previous

• Thread View
• Flat View

Actually, belay that stupid comment

Reading up on it, it was an extremely clever hack, installed by someone with real industrial-level knowledge and a clear desire to try and compromise the code. I'm not convinced it would have lasted long, even if it had got into the build source code, since it attempts to emulate a buffer overflow: a common target of regular bugfixes and corrections which take place during kernel development (since the source code is available, these things can be checked).

However, the fact that they knew so much and yet seemed unaware of the security systems built in to catch this kind of attack is surprising. It does, however, illustrate perfectly that keystone of security, detection, which is so very well expressed within the FreeBSD Handbook (section 10.1):
"...what you want to do is to create as many layers of security as are convenient and then carefully monitor the system for intrusions. You do not want to overbuild your security or you will interfere with the detection side, and detection is one of the single most important aspects of any security mechanism."
(in other words, don't just "secure the perimeter" and imagine you are safe).

Posted by: dw@...   Posted on: 11/07/03 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• The True Costs of Virtual Server Solutions VMware In an economic environment that is repeatedly heralding the message "do ... Download Now
• Building the Virtualized Enterprise with VMware Iinfrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now
• Virtualization: Architectural Considerations And Other Evaluation Criteria VMware Of the many approaches to x86 systems virtualization available in the ... Download Now