Rootkit
Rootkit: A set of tools used by an attacker after gaining root-level access to a host to conceal the attacker’s activities on the host and permit the attacker…
Definition
A set of tools used by an attacker after gaining root-level access to a host to conceal the attacker’s activities on the host and permit the attacker to maintain root-level access to the host through covert means.
Alternative Definitions
- Definition 2
A rootkit is a collection of software tools that are installed on a compromised system once it has been penetrated, in order to conceal the presence of the intruder (hacker or malware) and hide processes and files. Rootkits are important components of malware, for instance to prevent the malware from being identified by anti-virus programs.
- Definition 3
A set of software tools with administrator-level access privileges installed on an information system and designed to hide the presence of the tools, maintain the access privileges, and conceal the activities conducted by the tools.
- Definition 4
A set of software tools with administrator-level access privileges installed on an information system and designed to hide the presence of the tools, maintain the access privileges, and conceal the activities conducted by the tools. (Adapted from: CNSSI 4009) (NICCS)