Rootkit

Primary definition

A set of tools used by an attacker after gaining root-level access to a host to conceal the root-level access to attacker's activities on the host and permit the attacker to maintain the host through covert means.

Also known asroot kit · rk · bootkit
4 sources cited4 related termsReviewed Aug 10, 2026
Committee on National Security Systems Glossary CNSSI 4009-2015View source
People also ask

What is rootkit?

The term Rootkit refers to malware designed to hide its presence or maintain privileged access by modifying or manipulating operating-system behavior, system files, processes, or low-level components. It gives election, security, legal, or technical readers a specific label for the concept rather than a broader everyday meaning.

How is rootkit used in cybersecurity?

In practice, Rootkit is applied to the technical or security purpose captured by its definition: malware designed to hide its presence or maintain privileged access by modifying or manipulating operating-system behavior, system files, processes, or low-level components. Organizations combine that function with documented procedures, authorized access, testing, monitoring, and controls appropriate to the system.

Why does rootkit matter for election security?

Understanding Rootkit matters because the concept can affect security, reliability, auditability, or trusted operation. In this glossary context, it refers to malware designed to hide its presence or maintain privileged access by modifying or manipulating operating-system behavior, system files, processes, or low-level components.

Understand more election terms clearly

Get one important election term explained each week, with authoritative sources, practical context and related definitions.

Free. One useful email each week. Unsubscribe anytime.Learn more about the ESG newsletter →
CNSSGC

A set of tools used by an attacker after gaining root-level access to a host to conceal the root-level access to attacker's activities on the host and permit the attacker to maintain the host through covert means.

Committee on National Security Systems Glossary CNSSI 4009-2015 · 2024

Cite this term

Permanent URL · stable across revisions
Election Security Glossary. (2026). Rootkit. In Election Security Glossary. Retrieved August 21, 2026, from https://electionsecurityglossary.com/glossary/rootkit

Sources

4 cited · last checked Aug 10, 2026

01

Committee on National Security Systems Glossary CNSSI 4009-2015
Committee on National Security Systems Glossary CNSSI 4009-2015

High consensus

View source

02

Information Assurance Situation in Switzerland and Internationally
Information Assurance Situation in Switzerland and Internationally

Disputed

View source

03

NICCS Glossary
NICCS Glossary

Multi-source

View source

04

The Cyber Glossary
The Cyber Glossary

Multi-source

View source

Get the weekly election term

Receive one cited, source-backed election explanation in your inbox each week.

Get election terms explained weekly →
Free · Nonpartisan · Unsubscribe anytime.
Continue Research

Keep going from here

Three ways to go deeper on cybersecurity and adjacent terminology.