Malware analysis and detection engineering a comprehensive approach to detect and analyze modern malware

Discover how the internals of malware work and how you can analyze and detect it. You will learn not only how to analyze and reverse malware, but also how to classify and categorize it, giving you insight into the intent of the malware. Malware Analysis and Detection Engineering is a one-stop guide...

Descripción completa

Detalles Bibliográficos
Autor principal: Mohanta, Abhijit (-)
Otros Autores: Saldanha, Anoop
Formato: Libro electrónico
Idioma:Inglés
Publicado: New York : Apress 2020
Edición:1st ed
Materias:
Ver en Biblioteca Universitat Ramon Llull:https://discovery.url.edu/permalink/34CSUC_URL/1im36ta/alma991009630800306719
Tabla de Contenidos:
  • Part 1: Introduction
  • Chapter 1. Introduction
  • Chapter 2. Malware Analysis Lab Setup
  • Part 2: OS and System Fundamentals
  • Chapter 3. File and File Formats.-Chapter 4. Virtual Memory and the Portable Executable (PE) File
  • Chapter 5. Windows Internals
  • Part 3: Malware Components and Analysis
  • Chapter 6. Malware Components and Distribution
  • Chapter 7. Malware Packers
  • Chapter 8. Persistence Mechanisms
  • Chapter 9. Network Communication
  • Chapter 10. Code Injection, Process Hollowing, and API Hooking
  • Chapter 11. Stealth and Rootkits
  • Part 4: Malware Analysis and Classification
  • Chapter 12. Static Analysis
  • Chapter 13. Dynamic Analysis
  • Chapter 14. Memory Forensics With Volatility
  • Chapter 15. Malware Payload Dissection and Classification
  • Part 5: Malware Reverse Engineering
  • Chapter 16. Debuggers and Assembly Language
  • Chapter 17. Debugging Tricks for Unpacking Malware
  • Chapter 18. Debugging Code Injection
  • Chapter 19. Armoring and Evasion - The Anti Techniques
  • Chapter 20. File-less, Macros, and Other Malware Trends
  • Part 6: Detection Engineering
  • Chapter 21. Dev Analysis Lab Setup
  • Chapter 22. Anti-Virus Engines
  • Chapter 23. IDS/IPS and Snort/Suricata Rule Writing
  • Chapter 24. Malware Sandbox Internals
  • Chapter 25. Binary Instrumentation for Reversing Automation.