Reading Room.
Many systems administrators are not aware of the subtle differences between Mac OS X and its Unix operating system brethren (Jepson, Rothman, &amp; Rosen, 2008) Hackers can exploit this ignorance when hiding their presence on compromised systems (Skoudis, 2007) In this paper, I apply the Covering the Tracks techniques described in the SANS SEC 504 course to Mac OS X. Doing so highlights the ways in which Mac OS X and Unix diverge, increasing awareness of how an attacker might conceal himself in Mac OS X. The go.
Biomedical instrumentation technology Association for the Advancement of Medical Instrumentation