Saturday, January 22, 2011

Trying Linux virus protection for Linux security

2, script viruses, script viruses is the use of shell, scripting languages.

This virus writing a relatively simple, does not need to have a profound knowledge of, and implementation of a system failure, such as deleting files, corrupted system up and running, and even download and install Trojan horses, etc. But it spread is not strong, often cause damage on your computer. Prevention: preventing such a virus is to be careful not to just run the script from unknown origin, at the same time, it is necessary to strictly control the use of the root permissions. 3, Worm worm viruses under Linux and Windows worm-like, you can run independently, and to spread itself to other computers. On the Linux platform of worms often use some Linux systems and services for the vulnerability to be transmitted, for example, Ramen virus is using some version of Linux (Redhat6.2 and 7.0) rpc.statd and wu-ftp both security vulnerability to spread. Prevention: prevent this virus to block the worm attack at source, already several Linux virus outbreak event, they are using a Linux has been released with several security vulnerabilities in a timely manner, if the user has taken the corresponding security measures would not be affected by them. But unfortunately, many Linux administrators do not closely follow and their own systems and services related to the latest information, or to the virus works. The user wants to do a native security work, particularly concerned about Linux security vulnerability information, as soon as a new Linux vulnerabilities occur, it is necessary to take security measures in a timely manner. In addition, you can match the firewall rule to limit the spread of the worm. 3, backdoor backdoors can also be considered in a broad sense, on the Linux platform is also very active. Linux backdoors utilization system service loading, shared library files injection, rootkit Kit, even loading kernel modules (LKM), and other technologies to realize that many Linux platform of backdoor technology and intrusion technology, very subtle and difficult to clear. Prevention: preventing such a virus can make use of some software to do, there are some software to help users identify system a variety of backdoors, rootkits can find chkrootkitR, worms, backdoors, etc. 4. additional virus in Linux platform in addition to face against Linux viruses but also noticed that many Windows virus exists in the Linux file system, of course, this kind of windows viruses will not attack in Linux, but they have the opportunity to transfer to Windows System. For example, Linux Samba server can be used as the network file server, when a user with Windows virus files on a Samba server, Samba server becomes a virus carriers, although it will not be infected with the virus, but other Windows visited Samba services make it possible to get infected with a virus. Prevention: for overall safety, Linux systems also need to be able to find and remove the Windows virus. This is necessary to use some specialized antivirus software. Now, there are already some open source software and commercial software available for the user to select, and their number is increasing.

No comments:

Post a Comment