Directory

Reverse-Engineering Malware: The Essentials of Malware Analysis

Vendor

SANS

Website

Visit the Product Site

Pricing Model

Commercial

Modified

2009-09-23

Owner

Potentate

Add'l Info

Location - Worldwide Duration - 2 days

Submit review Recommend Report

Rating

0 vote

Favoured:

Expand your capacity to fight malicious code by learning how to analyze bots, worms, and trojans. This two-day course discusses the essential techniques for examining malware using a variety of system monitoring tools, a disassembler, and a debugger. You don't have to be a full-time malware searcher to benefit from this course — as organizations increasingly rely on their staff to act as first responders during a security incident, malware analysis skills become increasingly important. By covering both behavioral and code analysis approaches, this unique course provides a rounded approach to reverse-engineering. As a result, the course makes malware analysis accessible even to individuals with a limited exposure to programming concepts. The materials do not assume that the students are familiar with reverse-engineering; however, the difficulty level of concepts and techniques increases quickly as the course progresses. This course covers the key aspects of reverse-engineering malicious code. The instructor explains how to set up an inexpensive and flexible laboratory for understanding inner-workings of malware, and demonstrate the process by exploring capabilities of real-world specimens. You will learn to examine the program's behavioral patterns and assembly code, and study techniques for bypassing common code obfuscation mechanisms. The course also takes a look at analyzing browser-based malware. Hands-on workshop exercises are an essential aspect of this course and allow you to apply reverse-engineering techniques by examining malicious code in a carefully-controlled environment. When performing the analysis, you will study the supplied specimens' behavioral patterns, and examine key portions of their assembly code. Those students who wish to continue studying tools and techniques for malware analysis may be interested in taking the follow-up course from SANS Institute, SEC602: Reverse-Engineering Malware: Additional Tools and Techniques.

Reviews (0)

Be the first to review this listing!

Search Products

Product Directory

Who's Online?

Directory

Reverse-Engineering Malware: The Essentials of Malware Analysis