NICKLE (rootkit detection , prevention)

http://friends.cs.purdue.edu/dokuwiki/doku.php?id=nickle

Windows rootkti blogs

MJ001:

http://hi.baidu.com/mj0011

SUDAMI:

http://hi.baidu.com/sudami/blog/item/5ba21ceeb495a6fcb3fb9552.html

Tophet:

http://forum.eviloctal.com/thread-34574-1-1.html

http://www.harmonysecurity.com/blog/labels/Exploitation.html

Linux backdoor and keylogger links

http://www.governmentsecurity.org/archive/t3826.html
http://www.symantec.com/security_response/writeup.jsp?docid=2007-072612-1704-99
http://itgossips.com/2008/02/how-to-create-one-way-linux-backdoor-using-pair-key/
http://www.governmentsecurity.org/archive/t3480.html
http://www.linux-sec.net/Sniffer/
http://www.techworld.com/networking/features/index.cfm?featureid=2491