Description
Malware analysis is big business, and attacks can cost a company dearly. When malware breaches your defenses, you need to act quickly to cure current infections and prevent future ones from occurring. For those who want to stay ahead of the latest malware, Practical Malware Analysis will teach you the tools and techniques used by professional analysts. With this book as your guide, you'll be able to safely analyze, debug, and disassemble any malicious software that comes your way. You'll learn how to: Set up a safe virtual environment to analyze malware Quickly extract network signatures and host-based indicators Use key analysis tools like IDA Pro, OllyDbg, and WinDbg Overcome malware tricks like obfuscation, anti-disassembly, anti-debugging, and anti-virtual machine techniques Use your newfound knowledge of Windows internals for malware analysis Develop a methodology for unpacking malware and get practical experience with five of the most popular packers Analyze special cases
About the Author
Michael Sikorski is a malware analyst, researcher, and security consultant at Mandiant. His previous employers include the National Security Agency and MIT Lincoln Laboratory. Mike frequently teaches malware analysis to a variety of audiences including the FBI and Black Hat.
Andrew Honig is an Information Assurance Expert for the Department of Defense. He teaches courses on software analysis, reverse engineering, and Windows system programming. Andy is publicly credited with several zero-day exploits in VMware's virtualization products.
Reviews
"A hands-on introduction to malware analysis. I'd recommend it to anyone who wants to dissect Windows malware."
-Ilfak Guilfanov, Creator of IDA Pro
"The book every malware analyst should keep handy."
-Richard Bejtlich, CSO of Mandiant & Founder of TaoSecurity
"This book does exactly what it promises on the cover; it's crammed with detail and has an intensely practical approach, but it's well organised enough that you can keep it around as handy reference."
-Mary Branscombe, ZDNet
"If you're starting out in malware analysis, or if you are are coming to analysis from another discipline, I'd recommend having a nose."
-Paul Baccas, Naked Security from Sophos
"An excellent crash course in malware analysis."
-Dino Dai Zovi, Independent Security Consultant
"The most comprehensive guide to analysis of malware, offering detailed coverage of all the essential skills required to understand the specific challenges presented by modern malware."
-Chris Eagle, Senior Lecturer of Computer Science at the Naval Postgraduate School
"A great introduction to malware analysis. All chapters contain detailed technical explanations and hands-on lab exercises to get you immediate exposure to real malware."
-Sebastian Porst, Google Software Engineer
"Brings reverse engineering to readers of all skill levels. Technically rich and accessible, the labs will lead you to a deeper understanding of the art and science of reverse engineering. I strongly recommend this book for beginners and experts alike. I strongly believe this will become the defacto text for learning malware analysis in the future."
-Danny Quist, PhD, Founder of Offensive Computing
"An awesome book. . . written by knowledgeable authors who possess the rare gift of being able to communicate their knowledge through the written word."
-Richard Austin, IEEE Cipher
"If you only read one malware book or are looking to break into the world of malware analysis, this is the book to get."
-Patrick Engebretson, IA Professor at Dakota State University and Author of The Basics of Hacking and Pen Testing
"An excellent addition to the course materials for an advanced graduate level course on Software Security or Intrusion Detection Systems. The labs are especially useful to students in teaching the methods to reverse engineer, analyze and understand malicious software."
-Sal Stolfo, Professor, Columbia University
"The explanation of the tools is clear, the presentation of the process is lucid, and the actual detective work fascinating. All presented clearly and hitting just the right level so that developers with no previous experience in this particular area can participate fully. Highly recommended."
-Dr. Dobb's
"This book is like having your very own personal malware analysis teacher without the expensive training costs."
-Dustin Schultz, TheXploit
"I highly recommend this book to anyone looking to get their feet wet in malware analysis or just looking for a good desktop reference on the subject."
-Pete Arzamendi, 403 Labs
"I do not see how anyone who has hands-on responsibility for security of Windows systems can rationalize not being familiar with these tools."
-Stephen Northcutt, SANS Institute
"Practical Malware Analysis is another book that should be within reaching distance in anyone's DFIR shop. I went ahead and purchased PMA hoping the book would improve my knowledge and skills when faced with malware. What I ended up with was knowledge, a process and tools I can use to analyze any program I encounter. PMA gets a five star review (5 out of 5)."
-Journey Into Incident Response
"Highly recommend it to those looking to enter the malware analysis field."
-Linux Ninja
"If you are a beginner to this hacking field, then this book will be an excellent choice for you."
-Hackerzzz
"I cannot recommend it enough."
-Tony Robinson, Security Boulevard
Book Information
ISBN 9781593272906
Author Michael Sikorski
Format Paperback
Page Count 800
Imprint No Starch Press,US
Publisher No Starch Press,US
About the Author
Michael Sikorski is a malware analyst, researcher, and security consultant at Mandiant. His previous employers include the National Security Agency and MIT Lincoln Laboratory. Mike frequently teaches malware analysis to a variety of audiences including the FBI and Black Hat.
Andrew Honig is an Information Assurance Expert for the Department of Defense. He teaches courses on software analysis, reverse engineering, and Windows system programming. Andy is publicly credited with several zero-day exploits in VMware's virtualization products.
Reviews
"A hands-on introduction to malware analysis. I'd recommend it to anyone who wants to dissect Windows malware."
-Ilfak Guilfanov, Creator of IDA Pro
"The book every malware analyst should keep handy."
-Richard Bejtlich, CSO of Mandiant & Founder of TaoSecurity
"This book does exactly what it promises on the cover; it's crammed with detail and has an intensely practical approach, but it's well organised enough that you can keep it around as handy reference."
-Mary Branscombe, ZDNet
"If you're starting out in malware analysis, or if you are are coming to analysis from another discipline, I'd recommend having a nose."
-Paul Baccas, Naked Security from Sophos
"An excellent crash course in malware analysis."
-Dino Dai Zovi, Independent Security Consultant
"The most comprehensive guide to analysis of malware, offering detailed coverage of all the essential skills required to understand the specific challenges presented by modern malware."
-Chris Eagle, Senior Lecturer of Computer Science at the Naval Postgraduate School
"A great introduction to malware analysis. All chapters contain detailed technical explanations and hands-on lab exercises to get you immediate exposure to real malware."
-Sebastian Porst, Google Software Engineer
"Brings reverse engineering to readers of all skill levels. Technically rich and accessible, the labs will lead you to a deeper understanding of the art and science of reverse engineering. I strongly recommend this book for beginners and experts alike. I strongly believe this will become the defacto text for learning malware analysis in the future."
-Danny Quist, PhD, Founder of Offensive Computing
"An awesome book. . . written by knowledgeable authors who possess the rare gift of being able to communicate their knowledge through the written word."
-Richard Austin, IEEE Cipher
"If you only read one malware book or are looking to break into the world of malware analysis, this is the book to get."
-Patrick Engebretson, IA Professor at Dakota State University and Author of The Basics of Hacking and Pen Testing
"An excellent addition to the course materials for an advanced graduate level course on Software Security or Intrusion Detection Systems. The labs are especially useful to students in teaching the methods to reverse engineer, analyze and understand malicious software."
-Sal Stolfo, Professor, Columbia University
"The explanation of the tools is clear, the presentation of the process is lucid, and the actual detective work fascinating. All presented clearly and hitting just the right level so that developers with no previous experience in this particular area can participate fully. Highly recommended."
-Dr. Dobb's
"This book is like having your very own personal malware analysis teacher without the expensive training costs."
-Dustin Schultz, TheXploit
"I highly recommend this book to anyone looking to get their feet wet in malware analysis or just looking for a good desktop reference on the subject."
-Pete Arzamendi, 403 Labs
"I do not see how anyone who has hands-on responsibility for security of Windows systems can rationalize not being familiar with these tools."
-Stephen Northcutt, SANS Institute
"Practical Malware Analysis is another book that should be within reaching distance in anyone's DFIR shop. I went ahead and purchased PMA hoping the book would improve my knowledge and skills when faced with malware. What I ended up with was knowledge, a process and tools I can use to analyze any program I encounter. PMA gets a five star review (5 out of 5)."
-Journey Into Incident Response
"Highly recommend it to those looking to enter the malware analysis field."
-Linux Ninja
"If you are a beginner to this hacking field, then this book will be an excellent choice for you."
-Hackerzzz
"I cannot recommend it enough."
-Tony Robinson, Security Boulevard
Book Information
ISBN 9781593272906
Author Michael Sikorski
Format Paperback
Page Count 800
Imprint No Starch Press,US
Publisher No Starch Press,US
