Practical Malware Analysis

by Sikorski, Michael; Honig, Andrew

• ISBN13: 9781593272906
• ISBN10: 1593272901
• eBook ISBN(s): 9781593274306
• Format: Paperback
• Copyright: 2012-02-01
• Publisher: Amazon.Com
• More Book Details

About This Book

Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software

ISBN: 9781593272906

About This Book

"Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software" is a comprehensive textbook designed for students and professionals interested in understanding and analyzing malicious software. This book is a go-to resource for those looking to delve into the world of malware analysis, offering a detailed exploration of how professionals analyze, debug, and disassemble malicious software.

Who Uses It?

Primarily, this book is used by students and professionals in the fields of cybersecurity, computer science, and information assurance. It is also a valuable resource for anyone interested in understanding the basics of malware analysis, including security researchers and incident responders. The book's hands-on approach makes it an excellent addition to advanced graduate-level courses on software security or intrusion detection systems.

History and Editions

The book was first published in 2012 by No Starch Press. It has been widely praised for its practical approach to malware analysis, which includes tutorials and lab-based dissections. The book has been used by numerous institutions and has been a landmark in the field of malware analysis for over a decade. The authors, Michael Sikorski and Andrew Honig, have ensured that the book remains current and relevant by incorporating the latest techniques and tools used in the field.

Author and Other Works

Michael Sikorski and Andrew Honig are the authors of "Practical Malware Analysis." Michael Sikorski is known for his expertise in reverse engineering and malware analysis, which he brings to the text. Andrew Honig contributes his knowledge of malware behavior and analysis techniques, making the book a comprehensive resource for understanding malicious software.

Key Features

• Hands-On Approach: The book is filled with tutorials and lab-based dissections, allowing readers to learn by doing.
• Comprehensive Coverage: It covers all aspects of malware analysis, from setting up the environment to identifying and eradicating malware.
• Practical Tools: The book includes practical tools and techniques that professionals use in the field, making it an excellent resource for both beginners and experts.
• Expert Endorsements: The book has received praise from experts in the field, including Patrick Engbertson and Sal Stolfo, who have highlighted its effectiveness in teaching malware analysis methods.

Detailed Information

ISBNs and Formats

• 9781593272906: Hardcover edition
• 9781593274306: Paperback edition

Publication Details

• Publisher: No Starch Press
• Publication Date: February 1, 2012
• Number of Pages: 800 pages
• Language: English

Other Editions and Formats

While there are no other editions of this specific book, the same authors have contributed to other works in the field of cybersecurity and reverse engineering. For example, Michael Sikorski has written other books on related topics, but "Practical Malware Analysis" remains a standalone resource.

Related ISBNs:

9781593274306 (Paperback edition)

9781593272906 (Hardcover edition)

This detailed information section provides a quick reference for all the available formats and sources for "Practical Malware Analysis," making it easier to find and access the book in the preferred format.

Author Biography

Michael Sikorski is a malware analyst, researcher, and security consultant at Mandiant. His previous employers include the National Security Agency and MIT Lincoln Laboratory. Mike frequently teaches malware analysis to a variety of audiences including the FBI and Black Hat.
Andrew Honig is an Information Assurance Expert for the Department of Defense. He teaches courses on software analysis, reverse engineering, and Windows system programming. Andy is publicly credited with several zero-day exploits in VMware's virtualization products.

Table of Contents

Introduction
Chapter 0: Malware Analysis Primer
Part 1: Basic Analysis
Chapter 1: Basic Static Techniques
Chapter 2: Malware Analysis in Virtual Machines
Chapter 3: Basic Dynamic Analysis
Part 2: Advanced Static Analysis
Chapter 4: A Crash Course in x86 Disassembly
Chapter 5: IDA Pro
Chapter 6: Recognizing C Code Constructs in Assembly
Chapter 7: Analyzing Malicious Windows Programs
Part 3: Advanced Dynamic Analysis
Chapter 8: Debugging
Chapter 9: OllyDbg
Chapter 10: Kernel Debugging with WinDbg
Part 4: Malware Functionality
Chapter 11: Malware Behavior
Chapter 12: Covert Malware Launching
Chapter 13: Data Encoding
Chapter 14: Malware-Focused Network Signatures
Part 5: Anti-Reverse-Engineering
Chapter 15: Anti-Disassembly
Chapter 16: Anti-Debugging
Chapter 17: Anti-Virtual Machine Techniques
Chapter 18: Packers and Unpacking
Part 6: Special Topics
Chapter 19: Shellcode Analysis
Chapter 20: C++ Analysis
Chapter 21: 64-Bit Malware
Appendix A: Important Windows Functions
Appendix B: Tools for Malware Analysis
Appendix C: Solutions to Labs