CS38, Security and Privacy, Spring 2005

• Incident Response Tools For Unix, Part One: System Tools, Holt Sorenson
  http://www.securityfocus.com/infocus/1679
  This is actually required reading for any UNIX admin or programmer. Most of these tools were not designed for security per se, but rather for examining the state of a process or the system. This is where security = transparency.
  This article has a second part, which deals with examining filesystems: http://www.securityfocus.com/infocus/1738

• Tips on examining a Gnu/Linux system, Bill Harlan
  http://billharlan.com/pub/papers/Debugging_GnuLinux.html
  Private notes on useful comments. Worth a look.

• Reverse Engineering Linux x86 Binaries, Sean Burford
  http://www.ultri.cx/talks/reverse/  [local reveng-0.2.pdf]  [local reverse-talk.pdf]
  A nice summary of basic reverse engineering techniques, both static an dynamic. Also explains Gnu/Linux tools for process observation and debugging. Pay close attention to example commands, arguments etc.

• Introduction to Reverse Engineering Software, Mike Perry, Nasko Oskov
  http://www.acm.uiuc.edu/sigmil/RevEng/  [local www.acm.uiuc.edu/sigmil/RevEng/ ]
  Work in progress, but quite readable. Many intended topics are still missing, but it is definitely worth skimming, concentrating on the already fully fleshed sections. Pointers to extremely useful Windows tools (but you already know http://sysinternals.com, right?)

There are several excellent books that cover Gnu/Linux programming. I will post my list at some point, but definitely check out the web version of the "Advanced Linux Programming" book from CodeSourcery and New Riders.

Author:	CodeSourcery LLC
Title:	Advanced Linux Programming
ISBN:	0-7357-1043-0
Url:	http://www.advancedlinuxprogramming.com/
Excellent book on Gnu/Linux programming, available for download in its entirety under the Open Publication License.

Back to Dartmouth CS Home Page