LEGO Heavy Weapons now on sale! Use coupon code ARMORY to get 30 percent off the book.
 by Michael Sikorski and Andrew Honig February 2012, 800 pp. ISBN: 978-1-59327-290-6
Malware analysis is big business, and attacks can cost a company dearly. When malware breaches your defenses, you need to act quickly to cure current infections and prevent future ones from occurring. For those who want to stay ahead of the latest malware, Practical Malware Analysis will teach you the tools and techniques used by professional analysts. With this book as your guide, you'll be able to safely analyze, debug, and disassemble any malicious software that comes your way. You'll learn how to:
Hands-on labs throughout the book challenge you to practice and synthesize your skills as you dissect real malware samples, and pages of detailed dissections offer an over-the-shoulder look at how the pros do it. You'll learn how to crack open malware to see how it really works, determine what damage it has done, thoroughly clean your network, and ensure that the malware never comes back. Malware analysis is a cat-and-mouse game with rules that are constantly changing, so make sure you have the fundamentals. Whether you're tasked with securing one network or a thousand networks, or you're making a living as a malware analyst, you'll find what you need to succeed in Practical Malware Analysis. About the AuthorMichael Sikorski is a malware analyst, researcher, and security consultant at Mandiant. His previous employers include the National Security Agency and MIT Lincoln Laboratory. Mike frequently teaches malware analysis to a variety of audiences including the FBI and Black Hat. Andrew Honig is an Information Assurance Expert for the Department of Defense. He teaches courses on software analysis, reverse engineering, and Windows system programming. Andy is publicly credited with several zero-day exploits in VMware's virtualization products. Table of ContentsIntroduction Part 1: Basic Analysis Part 2: Advanced Static Analysis Part 3: Advanced Dynamic Analysis Part 4: Malware Functionality Part 5: Anti-Reverse-Engineering Part 6: Special Topics Appendix A: Important Windows Functions View the detailed Table of Contents (PDF) View the Index (PDF) (top)Reviews"Practical Malware Analysis is another book that should be within reaching distance in anyone’s DFIR shop. I went ahead and purchased PMA hoping the book would improve my knowledge and skills when faced with malware. What I ended up with was knowledge, a process and tools I can use to analyze any program I encounter. PMA gets a five star review (5 out of 5)." "This book comes highly recommended to anyone who wants to dissect Windows malware. Practical Malware Analysis helps you analyze malicious windows programs, assists you in debugging malicious software, walks you through the world of malware behavior and gives you the tools you will need for malware analysis." "The book every malware analyst should keep handy." "An excellent crash course in malware analysis." "...the most comprehensive guide to analysis of malware, offering detailed coverage of all the essential skills required to understand the specific challenges presented by modern malware." "A hands-on introduction to malware analysis. I'd recommend it to anyone who wants to dissect Windows malware." "...a great introduction to malware analysis. All chapters contain detailed technical explanations and hands-on lab exercises to get you immediate exposure to real malware." "...brings reverse engineering to readers of all skill levels. Technically rich and accessible, the labs will lead you to a deeper understanding of the art and science of reverse engineering. I strongly recommend this book for beginners and experts alike." "If you only read one malware book or are looking to break into the world of malware analysis, this is the book to get." "...an excellent addition to the course materials for an advanced graduate level course on Software Security or Intrusion Detection Systems. The labs are especially useful to students in teaching the methods to reverse engineer, analyze and understand malicious software." "I strongly believe this will become the defacto text for learning malware analysis in the future." "The explanation of the tools is clear, the presentation of the process is lucid, and the actual detective work fascinating. All presented clearly and hitting just the right level so that developers with no previous experience in this particular area can participate fully. Highly recommended." "This book is like having your very own personal malware analysis teacher without the expensive training costs." |
|||