Linux Malware Detect, abbreviated as LMD or maldet, is a software package that looks for malware on Linux systems and reports on it.[1]
 Output of a sample run of LMD | |
| Developer(s) | R-fx Networks |
|---|---|
| Stable release | 1.6.5
/ Mar 27 2023 |
| Operating system | Linux |
| Type | Linux malware Detector |
| License | GNU GPL v2 |
| Website | www |
Details
editTo protect Linux systems against vulnerabilities, various software packages are available, such as rootkit detectors such as Rootkit Hunter and chkrootkit, and auditing systems like lynis. Malware detection software such as LMD and ClamAV improve the security of systems by scanning them based on the signatures of thousands of instances of known malware.
For malware signatures, LMD uses various sources such as the signatures database of ClamAV and the Malware Hash Registry of Team Cymru.[2][3] Besides such third party signature databases, it also maintains its own database of signatures.
If a ClamAV scanner engine is already available on a system, LMD will use this for its scanner engine. This will normally give better performance than its built-in scanner engine.[1]
LMD can quarantine malware, and it can clean software that contains malicious code.[4]
The executable command of LMD is maldet. Typical command invocations are maldet -d, to check for later versions; maldet -u, to check for malware signature updates; and maldet -a, to scan the file system of the server on which LMD resides. Checking for malware signature updates is typically done in an automated manner. Besides periodic scans, real-time monitoring is also supported with the --monitor command-line argument. LMD can monitor users, paths and files in such a way.[4]
Linux Malware Detect is one of the objectives for the LPI 303 certification.[5]
References
edit- ^ a b Mastering Linux Security and Hardening by Donald A. Tevault Publisher: Packt Publishing Release Date: January 2018 ISBN 9781788620307
- ^ Linux Server Security, Chapter 8 Malware Detection, by Chris Binnie, John Wiley & Sons, 2016, ISBN 9781119277651
- ^ Cymru, Team. "Malware Hash Registry - Team Cymru". www.team-cymru.com. Retrieved 19 May 2018.
- ^ a b "Linux Malware Detect - R-fx Networks". www.rfxn.com. Retrieved 19 May 2018.
- ^ "Exam 303 Objectives". lpi.org. 31 August 2016. Retrieved 19 May 2018.