Internet Resources Related to Virus Infection

• " Executable and Linkable Format: Portable Format Specification . "This is a native specification of the ELF file format. It is strongly recommended for every investigator studying UNIX viruses. Available at http://www. ibiblio .org/pub/historic-linux/ftp-archives/sunsite.unc.edu/Nov-06-1994/GCC/ELF.doc.tar.gz .

• " The Linux Virus Writing and Detection HOWTO ." This is a step-by-step manual for designing Linux viruses, providing lots of practical examples. Available at http://www.creangel.com/papers/writingvirusinlinux.pdf .

• " Unix Viruses ." This article by Silvio Cesare describes the main operating principles of UNIX viruses and methods of their detection. Available at http://vx.netlux.org/lib/vsc02.html .

• Linux Viruses ELF File Format . This excellent overview of contemporary UNIX viruses by Marius Van Oers, supplemented with analysis of the techniques of insertion virus code into ELF files, is available at: http://www.nai.com/common/media/vil/pdf/mvanvoers_VB_conf%202000.pdf .