RE: Checking for backdoors in software products

From: Rob Shein <shoten(at)starpower.net>
Date: Thu Jun 05 2003 - 19:53:16 EDT

Chkrootkit does nothing to detect backdoors in software; it looks for known rootkits on unix systems, which are something entirely different. What he's looking for are backdoor access capabilities deliberately put in place by the authors of the software (like when id Software put that backdoor in their Doom multiplayer server all those years ago).

> -----Original Message-----
> From: Angel Todorov [mailto:atodorov@acm.org]
> Sent: Thursday, June 05, 2003 7:44 AM
> To: focus-ids@securityfocus.com
> Subject: Re: Checking for backdoors in software products
>
>
>
> Hello Bojidar,

---

INTRUSION PREVENTION: READY FOR PRIME TIME? IntruShield now offers unprecedented Intrusion IntelligenceTM capabilities - including intrusion identification, relevancy, direction, impact and analysis - enabling a path to prevention.

Download the latest white paper "Intrusion Prevention: Myths, Challenges, and Requirements" at: http://www.securityfocus.com/IntruVert-focus-ids2

---

Received on Thu Jun 5 20:03:39 2003