Rootkits: Subverting the Windows Kernel

Books are good books, good topics, but the translation really a problem, can only be passable to this space to introduce rookits, and basically say that clearly, some people may think rookits speaks so highly of the subject also not enough to be aware of this issue can only be touched in passing, for some professionals, lacking only a little less prompt, not technical issues, the field is important that imagination, not technical capability.

The book is not thick, but the weight is enough content and is not an ordinary reader will be able to immediately get started in. It is not like Windows as the core programming of the book informative, but the crucial point unambiguously. It gives examples from it can tell. This book assumes the reader already has a strong programming background, in the kernel-driven programming, Windows 内存 management, PE file format, etc. These systems programmer to understand the background knowledge it is only for very little space for an overview, followed is its application. Recommended to read the book and the Windows core programming knowledge to understand the driver began to read this book before.
Examples of the book is very good, in creativity and technology are very strong, is the technology I’ve read the classic English literature’s most powerful example. To find out exactly what would be very enlightening.
There is also a little little beat, and some technology in the new version under VISTA or Windows 7 has failed, do not know when a new version of. If the first time to have bought some time.