Overview
In accordance with the exam requirements, this chapter focuses primarily on identifying and detecting Trojan horse programs and clarifying the differences between backdoors, rootkits, and malicious loadable kernel modules. We'll also look at several techniques and automated tools you can employ to help defend against Trojan horse, backdoor, and rootkit attacks. In addition, we'll briefly explore a digest from a real-world attack that was detected and monitored using some of the same tools we'll cover later in Parts V and VI of this book.
