malware analysis and reverse engineering - ece.rutgers.edu · malware analysis and reverse...

1

Click here to load reader

Upload: trinhnhu

Post on 25-Dec-2018

216 views

Category:

Documents

0 download

Report

Download

Embed Size (px):

TRANSCRIPT

Page 1: Malware Analysis and Reverse Engineering - ece.rutgers.edu · Malware Analysis and Reverse Engineering Malicious software (malware) plays a part in most computer intrusions and security

Malware Analysis and Reverse Engineering

Malicious software (malware) plays a part in most computer intrusions and security incidents. Malware analysis and reverse engineering is the art of dissecting malware to understand how it works, how it can be identified, defected or eliminated once it infects a computer. With millions of malicious programs in the wild, and more encountered everyday such as Stuxnet worm, SSL Heartbleed exploits, Apple Shellshock vulnerability, and others that attacked TARGET and Home Depot retailers, malware analysis is critical to respond to prolific cyber security incidents in a timely manner. This course will introduce students to various categories of existing malicious software that causes harm to a user and computer, including viruses, Trojan horses, worms, rootkits, scareware, and spyware. The course will start with fundamentals of reverse engineering, and proceeds with covering advanced attacking strategies used by the existing malware, and discusses potential countermeasures in real-world production systems. The course will provide an excellent knowledge foundation and hands-on experience with real malware samples for students who seek interests in academia/research as well as industry. In particular, the course will cover:

• Principles and Fundamental Concepts o Assembly languages and program compilation o Binary code and ELF/PE data representations o Static binary analysis and disassembly o Dynamic execution analysis

• Attacks and Existing Malware o Malware behavior (e.g., control flow hijacking) o Anti-reverse engineering and obfuscation o Return-oriented programming o Web-based malware and social engineering

• Analyses and Security Defenses o Symbolic execution and taint tracking o Runtime memory forensics o Behavioral detection signatures o Security hardening (ASLR, DEP, and CFI)

Instructor: Saman Zonouz [email protected]

For undergraduate students this course is offered as

332:492 Independent research (index 00736 since we have exhausted

all available Special Topics course numbers. To register, contact

Dr. Sannuti at [email protected] for a Special Permission number.

Time

schedule

Wed 5PM to

8PM

(periods 6,7))in room

CoRE 538

Reverse Engineering Malware · 2013. 1. 10. · SRI International Reverse Engineering Malware Hassen Saidi Computer Science Laboratory SRI International [email protected]. The

Tripoux: Reverse-engineering of malware packers for dummies · 2010-11-26 · Tripoux: Reverse-engineering of malware packers for dummies - DeepSec 2010 10 •Common packed binaries

Reversing & malware analysis training part 5 reverse engineering tools basics

Introduction to Malware Detection and Reverse Engineering

Malware-Analyse und Reverse Engineeringmulticores.org/teaching/files/MARE_03-Laufzeit.pdf · Malware-Analyse und Reverse Engineering 3: Laufzeit! 30.3.2017 Prof. Dr. Michael Engel

RevEngE is a dish served cold: Debug-Oriented Malware … · 2019. 12. 12. · as malware re-engineering. We also introduce RevEngE1—the Reverse Engineering Engine for malware decompilation

Reverse Engineering Mac Malware - Digital Forensics … · Reverse Engineering Mac Malware SANS DFIR Summit 06/09/14 Sarah Edwards @iamevltwin mac4n6.com

Reverse Engineering Malware: A look inside Operation Tovar

Christian Wojner, CERT - FIRST · Wh01am 02.04.2013 2 Person Christian Wojner Malware Analysis, Reverse Engineering, Computer Forensics CERT.at / GovCERT.gv.at Papers Mass Malware

Understanding APT1 malware techniques using malware analysis and reverse engineering

Reverse Engineering Malware - A Practical Guide

Course Introduction & Logistics · 2013. 6. 25. · Reverse Engineering Malware, Spring 2013 Antti Tikkanen, F-Secure Corporation Course Introduction & Logistics . Reverse Engineering

Reverse Engineering Malware Dynamic Analysis of Binary Malware · Title: T-110.6220: Using Debuggers to Analyze Malware Author: Tikkanen Antti Created Date: 2/14/2014 10:49:53 AM

Reverse Engineering Malware Part 1

Reverse Engineering Mac Malware - SANS · PDF fileReverse Engineering Mac Malware SANS DFIR Summit ... Mobile, Malware, ... General Forensics Nerd & Mac Fan Girl

Malware Reverse Engineering (Class)

Android Reverse Engineering - Internet Security Auditors€¦ · Malware identification in Android apps . OWASP 4 Reverse engineering: definition and objectives Definition Refers

Reverse Engineering Malware Part 1 - Exploit …...Also This Article is mainly to demonstrate Reverse Code Engineering ..I will try to Reverse Engineer Important parts of Malware

INTRODUCTION TO MALWARE REVERSE ENGINEERING › syed › files › 2014 › 06 › book... · INTRODUCTION TO MALWARE REVERSE ENGINEERING Syed Zainudeen Mohd Shaid 1. INTRODUCTION

ecenews - ece.rutgers.edu

© SERG Reverse Engineering (Reversing Malware) Reversing Malware [based on material from the textbook]

How Malware Attacks Web Applications - OWASP Foundation · 2020. 1. 17. · • Malware Reverse Engineering • Anti-Virus Evasion • Rootkit Technologies ... Exploit Packs, Malicious

Quick Overview of TAs Responsibilities ... - ece.rutgers.edu

Reverse Engineering & Malware Analysis Engineering... · Reverse Engineering & Malware Analysis ... aren't making any changes to their security in 2017” - Barkly, ... Linux.ProxyM

Intrusion Detection and Malware Analysis · Intrusion Detection and Malware Analysis Course Introduction / Overview of Security Threats ... reverse engineering Stuxnet and understanding

Malware, Reverse Code Engineering and Cyber Threat

«Introduction to malware reverse engineering» by Sergey Kharyuk

Automatic Reverse Engineering of Malware Emulatorsold.iseclab.org/people/andrew/download/oakland09.pdfreverse engineering of malware emulators. Our algorithms are based on dynamic

Android Security and Reverse Engineering · • Android and Malware Basics – Os Elements – Application Structure – Malware Basics ... • Dalvikcode is obtained through a conversion

Reversing malware analysis training part5 reverse engineering tools basics

Malware-Analyse und Reverse Engineering · Malware-Analyse und Reverse Engineering 13: Rückblick über das Semester 29.6.2017 Prof. Dr. Michael Engel. Überblick MARE 2017: • Einführungund

Reverse Engineering Malware For Newbies

Windows for Reverse Engineers OS Internals · Windows for Reverse Engineers OS Internals CS-E4330 - Special Course in Information Security Reverse Engineering Malware Course 2017

Reverse Engineering Mac Malware - SANS Information ... · Reverse Engineering Mac Malware ... Office Document ZIP Archive ... • ^Reverse Engineering OS X _ - reverse.put.as (@osxreverser)

Automatic Reverse Engineering of Malware Emulators