Présentation de l'éditeur
With our ever-increasing reliance on computers comes an ever-growing risk of malware. Security professionals will find plenty of solutions in this book to the problems posed by viruses, Trojan horses, worms, spyware, rootkits, adware, and other invasive software. Written by well-known malware experts, this guide reveals solutions to numerous problems and includes a DVD of custom programs and tools that illustrate the concepts, enhancing your skills.
- Security professionals face a constant battle against malicious software; this practical manual will improve your analytical capabilities and provide dozens of valuable and innovative solutions
- Covers classifying malware, packing and unpacking, dynamic malware analysis, decoding and decrypting, rootkit detection, memory forensics, open source malware research, and much more
- Includes generous amounts of source code in C, Python, and Perl to extend your favorite tools or build new ones, and custom programs on the DVD to demonstrate the solutions
Malware Analyst's Cookbook is indispensible to IT security administrators, incident responders, forensic analysts, and malware researchers.
Note: The Kindle edition of this book does not include any CDs or DVDs.
Quatrième de couverture
We called this a cookbook because each "recipe" presents boththe ingredients and the steps you take to resolve a specificproblem or research a given threat. On the DVD, you′ll findsupporting files and original programs that provide additionalresources. You′ll learn how to analyze malware using tools writtenby the authors as well as hundreds of other publicly availabletools. If your job involves incident response, computer forensics,systems security, or antivirus research, this book will becomeinvaluable to you.
Learn to conduct online investigations without revealing youridentity
Use honeypots to collect malware being distributed by bots andworms
Build a low–budget malware lab with virtualization or bare boneshardware
Reverse engineer common encoding and encryption algorithms
Set up an advanced memory forensics platform for malwareanalysis
Investigate prevalent threats such as Zeus, Silent Banker,CoreFlood, Conficker, Virut, Clampi, Bankpatch, BlackEnergy, andmany more!
On the DVD
Use the files on the DVD to follow along with the recipes or toconduct your own investigations and analyses. You will find:
Windows and Linux tools
Over 50 original programs in Python, C/C++, and Perl
"The most useful technical security book I′ve read this year. Amust–have for all who protect systems from malicioussoftware."
Lenny Zeltser, Security Practice Director at Savvisand Senior Faculty Member at SANS Institute
"The ultimate guide for anyone interested in malwareanalysis."
Ryan Olson, Director, VeriSign iDefense RapidResponse Team
"Every page is filled with practical malware knowledge,innovative ideas, and useful tools. Worth its weight ingold!"
AAron Walters, Lead Developer of Volatility and VP ofSecurity R&D at Terremark