Linux Server anti-virus practices

Article Title: Linux Server anti-virus practice. Linux is a technology channel of the IT lab in China. Includes basic categories such as desktop applications, Linux system management, kernel research, embedded systems, and open source. 1. Introduction to Linux viruses

With the increasing popularity of Linux applications, a large number of network servers use the Linux operating system. Because there are still some differences between Linux desktop applications and Windows, in enterprise applications, Linux and Windows operating systems often coexist to form a heterogeneous network. Most servers use Linux and Unix, while Windows XP and Vista are used on the desktop. Linux has always been regarded as an enemy of Windows systems, because it is not only secure, stable, and cost-effective, but also seldom finds virus spreading. However, as more servers, workstations, and PCs use Linux software, computer virus makers are also starting to attack the system. For Linux systems, the security and permission control of servers and workstations are relatively powerful. This is mainly due to its excellent technical design, which not only makes its operating system hard to crash, it also makes it difficult to be abused. After more than 20 years of development and improvement, Unix has become very solid, and Linux basically inherits its advantages. In Linux, if it is not a super user, it is difficult for programs that maliciously infect system files to succeed. Of course, this does not mean that Linux is impeccable. Viruses are essentially binary executable programs. Although Server Load balancer 1 (Slammer), Blast, Sobig, Mimail, and Laura (Win32.Xorala) viruses are not damaged on Linux servers, but it will spread to computers that access its Windows platform.

Virus Classification on Linux:

1. Executable File virus: an executable file virus is a virus that can be parasitic in a file and infected primarily with objects. Virus makers can easily infect ELF files regardless of their weapons, assembler, or C. In this regard, the virus is Lindose.

2. worm (worm) virus: Eugene H. to distinguish between worms and viruses, Spafford defines the technical perspective of worms. "computer worms can run independently and spread a version of itself containing all the functions to another computer." On the Linux platform, worms are rampant, such as ramen, lion, and Slapper spreading by exploiting system vulnerabilities. These viruses are infected with a large number of Linux systems, causing huge losses.

3. Script virus: many viruses are generated in shell scripting language. This type of virus is easy to write, but it is equally destructive. We know that there are many. the script file ending with sh, and a shell script with just a dozen lines can traverse all the script files on the hard disk in a short time for infection.

4. backdoor program: in the broad definition of virus, backdoor programs are also included in the scope of virus. The backdoor that is active in Windows is also very active on Linux. From adding simple backdoors for system superuser accounts, to using system service loading, sharing library file injection, rootkit toolkit, and even loading kernel modules (LKM ), the backdoor technology on the Linux platform has developed very well and is concealed and difficult to remove. It is a headache for Linux administrators.

[1] [2] [3] [4] [5] Next page