Bộ sách luyện thi ETS 2023 LC&RC
199,000₫
299,000₫
Sách keo gáy, bìa mềm
We’re all aware of Stuxnet, ShadowHammer, Sunburst,
and similar attacks that use evasion to remain hidden while defending
themselves from detection and analysis. Because advanced threats like
these can adapt and, in some cases, self-destruct to evade detection,
even the most seasoned investigators can use a little help with analysis
now and then. Evasive Malware will introduce you to the evasion
techniques used by today’s malicious software and show you how to defeat
them.
Following a crash course on using static and dynamic code
analysis to uncover malware’s true intentions, you’ll learn how malware
weaponizes context awareness to detect and skirt virtual machines and
sandboxes, plus the various tricks it uses to thwart analysis tools.
You’ll explore the world of anti-reversing, from anti-disassembly
methods and debugging interference to covert code execution and
misdirection tactics. You’ll also delve into defense evasion, from
process injection and rootkits to fileless malware. Finally, you’ll
dissect encoding, encryption, and the complexities of malware
obfuscators and packers to uncover the evil within.
You’ll learn how malware:
- Abuses legitimate components of Windows, like the Windows API and LOLBins, to run undetected
- Uses environmental quirks and context awareness, like CPU timing and hypervisor enumeration, to detect attempts at analysis
-
Bypasses network and endpoint defenses using passive circumvention
techniques, like obfuscation and mutation, and active techniques, like
unhooking and tampering
- Detects debuggers and circumvents dynamic and static code analysis
You’ll
also find tips for building a malware analysis lab and tuning it to
better counter anti-analysis techniques in malware. Whether you’re a
frontline defender, a forensic analyst, a detection engineer, or a
researcher, Evasive Malware will arm you with the knowledge and skills
you need to outmaneuver the stealthiest of today’s cyber adversaries.
Categories:Computers - Security
Year:2024
Edition:1 / converted
Publisher:No Starch Press
Language:english
Pages:490
