| sec:ifSuccessfulLeadsToThreat SOME sec:MaliciousCode |
| sec:MaliciousCode |
| sec:threatens SOME (sec:_Integrity AND sec:_Host) |
| dc:description | A collection of software tools installed by an intruder on a compromised computer. A rootkit will normally contain tools to hide evidence of the intrusion and backdoors to allow access or remote-control in future. Rootkits often include tools to facilitate other types of misuse such as distributed denial of service attacks or distribution of spam. (ODoC) |
Class(sec:Rootkit partial restriction(sec:ifSuccessfulLeadsToThreat someValuesFrom(sec:MaliciousCode))
sec:MaliciousCode
restriction(sec:threatens someValuesFrom(intersectionOf(sec:_Integrity
sec:_Host))))