Atjaunināt sīkdatņu piekrišanu

E-grāmata: Malware Analysis and Detection Engineering: A Comprehensive Approach to Detect and Analyze Modern Malware

4.10/5 (18 ratings by Goodreads)
  • Formāts: PDF+DRM
  • Izdošanas datums: 22-Sep-2020
  • Izdevniecība: APress
  • Valoda: eng
  • ISBN-13: 9781484261934
  • Formāts - PDF+DRM
  • Cena: 88,63 €*
  • * ši ir gala cena, t.i., netiek piemērotas nekādas papildus atlaides
  • Ielikt grozā
  • Pievienot vēlmju sarakstam
  • Šī e-grāmata paredzēta tikai personīgai lietošanai. E-grāmatas nav iespējams atgriezt un nauda par iegādātajām e-grāmatām netiek atmaksāta.
  • Formāts: PDF+DRM
  • Izdošanas datums: 22-Sep-2020
  • Izdevniecība: APress
  • Valoda: eng
  • ISBN-13: 9781484261934

DRM restrictions

  • Kopēšana (kopēt/ievietot):

    nav atļauts

  • Drukāšana:

    nav atļauts

  • Lietošana:

    Digitālo tiesību pārvaldība (Digital Rights Management (DRM))
    Izdevējs ir piegādājis šo grāmatu šifrētā veidā, kas nozīmē, ka jums ir jāinstalē bezmaksas programmatūra, lai to atbloķētu un lasītu. Lai lasītu šo e-grāmatu, jums ir jāizveido Adobe ID. Vairāk informācijas šeit. E-grāmatu var lasīt un lejupielādēt līdz 6 ierīcēm (vienam lietotājam ar vienu un to pašu Adobe ID).

    Nepieciešamā programmatūra
    Lai lasītu šo e-grāmatu mobilajā ierīcē (tālrunī vai planšetdatorā), jums būs jāinstalē šī bezmaksas lietotne: PocketBook Reader (iOS / Android)

    Lai lejupielādētu un lasītu šo e-grāmatu datorā vai Mac datorā, jums ir nepieciešamid Adobe Digital Editions (šī ir bezmaksas lietotne, kas īpaši izstrādāta e-grāmatām. Tā nav tas pats, kas Adobe Reader, kas, iespējams, jau ir jūsu datorā.)

    Jūs nevarat lasīt šo e-grāmatu, izmantojot Amazon Kindle.

Beginning-Intermediate user level

Discover how the internals of malware work and how you can analyze and detect it. You will learn not only how to analyze and reverse malware, but also how to classify and categorize it, giving you insight into the intent of the malware. Malware Analysis and Detection Engineering is a one-stop guide to malware analysis that simplifies the topic by teaching you undocumented tricks used by analysts in the industry. You will be able to extend your expertise to analyze and reverse the challenges that malicious software throws at you. 

The book starts with an introduction to malware analysis and reverse engineering to provide insight on the different types of malware and also the terminology used in the anti-malware industry. You will know how to set up an isolated lab environment to safely execute and analyze malware. You will learn about malware packing, code injection, and process hollowing plus how to analyze, reverse, classify, and categorize malware using static and dynamic tools. You will be able to automate your malware analysis process by exploring detection tools to modify and trace malware programs, including sandboxes, IDS/IPS, anti-virus, and Windows binary instrumentation.

The book provides comprehensive content in combination with hands-on exercises to help you dig into the details of malware dissection, giving you the confidence to tackle malware that enters your environment.


What You Will Learn
  • Analyze, dissect, reverse engineer, and classify malware
  • Effectively handle malware with custom packers and compilers
  • Unpack complex malware to locate vital malware components and decipher their intent
  • Use various static and dynamic malware analysis tools   
  • Leverage the internals of various detection engineering tools to improve your workflow         
  • Write Snort rules and learn to use them with Suricata IDS 

Who This Book Is For

Security professionals, malware analysts, SOC analysts, incident responders, detection engineers, reverse engineers, and network security engineers


"This book is a beast! If you're looking to master the ever-widening field of malware analysis, look no further. This is the definitive guide for you."  Pedram Amini, CTO Inquest; Founder OpenRCE.org and ZeroDayInitiative

Part 1: Introduction

1. Introduction

2. Malware Analysis Lab Setup

Part 2: OS and System Fundamentals

3. File & File Formats

4. Virtual Memory & Portable Executable(PE) File

5. Windows Internals

Part 3: Malware Components & Analysis

6. Malware Components & Distribution

7. Malware Packers

8. Persistence Mechanisms

9. Network Communication

10. Code Injection, Process Hollowing & API Hooking

11. Stealth and Rootkits

Part 3: Malware Analysis & Classification

12. Static Analysis

13. Dynamic Analysis

14. Memory Forensics With Volatility

15. Malware Payload Dissection & Classification

Part 4: Malware Reverse Engineering

16. Debuggers & Assembly Language

17. Debugging Tricks for Unpacking Malwares

18. Debugging Code Injection

19. Armoring & Evasion - The Anti Techniques

20. File-less, Macros & Other Malware Trends

Part 5: Detection Engineering

21. Dev Analysis Lab Setup

22. Anti-Virus Engines

23. IDS/IPS & Snort/Suricata Rule Writing

24. Malware Sandbox Internals

25. Binary Instrumentation for Reversing Automation


Abhijit Mohanta is an independent cybersecurity consultant and corporate trainer who has worked extensively in malware reverse engineering, vulnerability research, anti-virus engine development, anti-malware signature writing, and sandbox development. He has worked with the Symantec, McAfee, and Juniper Networks anti-malware labs. He holds several patents. He blogs regularly and has been a speaker at security conferences and workshops. His articles have been republished and quoted in a number of blogs and whitepapers, including eForensics magazine. He is also the author of the book Preventing Ransomware: Understand, Prevent, and Remediate Ransomware Attacks.





Anoop Saldanha is one of the core authors of the Suricata Intrusion Detection and Prevention System, funded by the US Department of Homeland Security (DHS). He works as an independent security consultant and as a corporate security trainer. He designs and develops various detection technologies to secure both the host and the network, ranging from network security tools such as IDS/IPS to malware sandboxes, malware analysis tools, firewalls, and endpoints. He holds multiple patents in the field of security and speaks at security conferences and workshops. He has previously worked in threat research labs and detection engineering teams at RSA Security, Juniper Networks, Cyphort Cybersecurity, and various other cybersecurity startups.