Rootkits

Question 1

Boot loader rootkit

Answer 1

replace boot loader with one controlled by the hacker Ring 0

Question 2

Kernel level rootkit

Answer 2

attack the boot sectors kernel level of the OS replacing kernel code with back-door code. Ring 0

Question 3

Application level rootkit

Answer 3

replace application files with trojan binaries. work within an to apps behavior, user rights and actions Ring 3

Question 4

Library level rootkit

Answer 4

use system-level calls to hide their existence Ring 2

Question 5

Ring 0

Answer 5

Kernel

Question 6

Ring 1

Answer 6

Drivers

Question 7

Ring 2

Answer 7

Libraries

Question 8

Ring 3

Answer 8

Applications also User mode

Question 9

Some Rootkits

Answer 9

Horsepill, grayfish, Sirefef, Azazel, Avatar, Necurs, ZeroAccess

Question 10

Hypervisor rootkit

Answer 10

Modify the boot sequence of a host system to load a virtual machine as the host OS