title: What is the Dragon Book for Rootkits on Linux?
body: <p>I recently came across this book called <strong><a href="https://rads.stackoverflow.com/amzn/click/com/1598220616" rel="noreferrer" rel="nofollow noreferrer">The Rootkit Aresenal</a></strong> by Bill Blunden that gives a detailed (I mean it!) description of the basics underlying rootkits and also goes about on how to design them for Windows (so it requires some basic understanding of IA32-internals). Because I concentrate mostly on Linux-centric security, I can only use the book to gain basics but not anything related to the Linux kernel. Can anyone please suggest a Dragon book of Rootkits for Linux that will give me some <strong><em>hands-on experience</em></strong>?</p>
  
  <p>Just in case someone is about to ask me this question: </p>
  
  <blockquote>
    <p>"Why are you looking at rootkits?
    Isn't that bad?"</p>
  </blockquote>
  
  <p>Someone on slashdot once said:</p>
  
  <blockquote>
    <p>How can we implement security if we
    don't understand the ways we can be
    attacked?</p>
  </blockquote>
  
  <p>Just to give an idea of what I am looking for: <strong>It is enough if the Table of Contents of the reference looks something like the following only replaced with Linux rootkits instead of Windows.</strong></p>
  
  <p><a href="http://books.google.com/books?id=5Cs46M9FV0sC&amp;pg=PR5&amp;source=gbs_selected_pages&amp;cad=3#v=onepage&amp;q&amp;f=false" rel="noreferrer">The Rootkit Arsenal Table of Contents</a></p>