Introduction
Chapter 1. x86 and x64
Chapter 2. ARM
Chapter 3. The Windows Kernel
Chapter 4. Debugging and Automation
Chapter 5. Obfuscation
Appendix. Sample Names and Corresponding SHA1 Hashes
Index

Analyzing how hacks are done, so as to stop them in the future

Reverse engineering is the process of analyzing hardware or software and understanding it, without having access to the source code or design documents. Hackers are able to reverse engineer systems and exploit what they find with scary results. Now the good guys can use the same tools to thwart these threats. Practical Reverse Engineering goes under the hood of reverse engineering for security analysts, security engineers, and system programmers, so they can learn how to use these same processes to stop hackers in their tracks.

The book covers x86, x64, and ARM (the first book to cover all three); Windows kernel-mode code rootkits and drivers; virtual machine protection techniques; and much more. Best of all, it offers a systematic approach to the material, with plenty of hands-on exercises and real-world examples.

Offers a systematic approach to understanding reverse engineering, with hands-on exercises and real-world examples
Covers x86, x64, and advanced RISC machine (ARM) architectures as well as deobfuscation and virtual machine protection techniques
Provides special coverage of Windows kernel-mode code (rootkits/drivers), a topic not often covered elsewhere, and explains how to analyze drivers step by step
Demystifies topics that have a steep learning curve
Includes a bonus chapter on reverse engineering tools
Practical Reverse Engineering: Using x86, x64, ARM, Windows Kernel, and Reversing Tools provides crucial, up-to-date guidance for a broad range of IT professionals.

Practical Reverse Engineering: x86, x64, ARM, Windows Kernel, Reversing Tools, and Obfuscation 1st Edition

About the Author
Foreword by Todd Heberlein
Preface
Part I: Getting Started
Chapter 1: Network Security Monitoring Rationale
Chapter 2: Collecting Network Traffic: Access, Storage, and Management
Part II: Security Onion Deployment
Chapter 3: Stand-alone NSM Deployment and Installation
Chapter 4: Distributed Deployment
Chapter 5: SO Platform Housekeeping
Part III: Tools
Chapter 6: Command Line Packet Analysis Tools
Chapter 7: Graphical Packet Analysis Tools
Chapter 8: NSM Consoles
Part IV: NSM in Action
Chapter 9: NSM Operations
Chapter 10: Server-side Compromise
Chapter 11: Client-side Compromise
Chapter 12: Extending SO
Chapter 13: Proxies and Checksums
Conclusion
Appendix: SO Scripts and Configuration
Index

Network security is not simply about building impenetrable walls—determined attackers will eventually overcome traditional defenses. The most effective computer security strategies integrate network security monitoring (NSM): the collection and analysis of data to help you detect and respond to intrusions.

In The Practice of Network Security Monitoring, Mandiant CSO Richard Bejtlich shows you how to use NSM to add a robust layer of protection around your networks—no prior experience required. To help you avoid costly and inflexible solutions, he teaches you how to deploy, build, and run an NSM operation using open source software and vendor-neutral tools.

You'll learn how to:
–Determine where to deploy NSM platforms, and size them for the monitored networks
–Deploy stand-alone or distributed NSM installations
–Use command line and graphical packet analysis tools, and NSM consoles
–Interpret network evidence from server-side and client-side intrusions
–Integrate threat intelligence into NSM software to identify sophisticated adversaries

There’s no foolproof way to keep attackers out of your network. But when they get in, you’ll be prepared. The Practice of Network Security Monitoring will show you how to build a security net to detect, contain, and control them. Attacks are inevitable, but losing sensitive data shouldn't be.

The Practice of Network Security Monitoring: Understanding Incident Detection and Response 1st Edition

Introduction
Part I. Getting Started
Chapter 1. Dive In and Threat Model!
Chapter 2. Strategies for Threat Modeling
Part II. Finding Threats
Chapter 3. STRIDE
Chapter 4. Attack Trees
Chapter 5. Attack Libraries
Chapter 6. Privacy Tools
Part III. Managing and Addressing Threats
Chapter 7. Processing and Managing Threats
Chapter 8. Defensive Tactics and Technologies
Chapter 9. Trade-Offs When Addressing Threats
Chapter 10. Validating That Threats Are Addressed
Chapter 11. Threat Modeling Tools
Part IV. Threat Modeling in Technologies and Tricky Areas
Chapter 12. Requirements Cookbook
Chapter 13. Web and Cloud Threats
Chapter 14. Accounts and Identity
Chapter 15. Human Factors and Usability
Chapter 16. Threats to Cryptosystems
Part V. Taking It to the Next Level
Chapter 17. Bringing Threat Modeling to Your Organization
Chapter 18. Experimental Approaches
Chapter 19. Architecting for Success
Appendix A. Helpful Tools
Appendix B. Threat Trees
Appendix C. Attacker Lists
Appendix D. Elevation of Privilege: The Cards
Appendix E. Case Studies
Glossary
Bibliography
Index

The only security book to be chosen as a Dr. Dobbs Jolt Award Finalist since Bruce Schneier's Secrets and Lies and Applied Cryptography!

Adam Shostack is responsible for security development lifecycle threat modeling at Microsoft and is one of a handful of threat modeling experts in the world. Now, he is sharing his considerable expertise into this unique book. With pages of specific actionable advice, he details how to build better security into the design of systems, software, or services from the outset. You'll explore various threat modeling approaches, find out how to test your designs against threats, and learn effective ways to address threats that have been validated at Microsoft and other top companies.

Systems security managers, you'll find tools and a framework for structured thinking about what can go wrong. Software developers, you'll appreciate the jargon-free and accessible introduction to this essential skill. Security professionals, you'll learn to discern changing threats and discover the easiest ways to adopt a structured approach to threat modeling.

Provides a unique how-to for security and software developers who need to design secure products and systems and test their designs
Explains how to threat model and explores various threat modeling approaches, such as asset-centric, attacker-centric and software-centric
Provides effective approaches and techniques that have been proven at Microsoft and elsewhere
Offers actionable how-to advice not tied to any specific software, operating system, or programming language
Authored by a Microsoft professional who is one of the most prominent threat modeling experts in the world
As more software is delivered on the Internet or operates on Internet-connected devices, the design of secure software is absolutely critical. Make sure you're ready with Threat Modeling: Designing for Security.

Threat Modeling: Designing for Security 1st Edition

Introduction
Chapter 1 Looking at the Ecosystem
Chapter 2 Android Security Design and Architecture
Chapter 3 Rooting Your Device
Chapter 4 Reviewing Application Security
Chapter 5 Understanding Android’s Attack Surface
Chapter 6 Finding Vulnerabilities with Fuzz Testing
Chapter 7 Debugging and Analyzing Vulnerabilities
Chapter 8 Exploiting User Space Software
Chapter 9 Return Oriented Programming
Chapter 10 Hacking and Attacking the Kernel
Chapter 11 Attacking the Radio Interface Layer
Chapter 12 Exploit Mitigations
Chapter 13 Hardware Attacks
Appendix A Tool Catalog
Appendix B Open Source Repositories
Appendix C References
Index

The first comprehensive guide to discovering and preventing attacks on the Android OS

As the Android operating system continues to increase its share of the smartphone market, smartphone hacking remains a growing threat. Written by experts who rank among the world's foremost Android security researchers, this book presents vulnerability discovery, analysis, and exploitation tools for the good guys. Following a detailed explanation of how the Android OS works and its overall security architecture, the authors examine how vulnerabilities can be discovered and exploits developed for various system components, preparing you to defend against them.

If you are a mobile device administrator, security researcher, Android app developer, or consultant responsible for evaluating Android security, you will find this guide is essential to your toolbox.

A crack team of leading Android security researchers explain Android security risks, security design and architecture, rooting, fuzz testing, and vulnerability analysis
Covers Android application building blocks and security as well as debugging and auditing Android apps
Prepares mobile device administrators, security researchers, Android app developers, and security consultants to defend Android systems against attack
Android Hacker's Handbook is the first comprehensive resource for IT professionals charged with smartphone security.

Android Hacker's Handbook

About the Author
Preface
Acknowledgments
Part I. Strategies of the Attacker
1. Introduction to the Games of Nature
2. The Fascination of Malicious Code Analysis
3. Malicious Code Environments
4. Classification of Infection Strategies
5. Classification of In-Memory Strategies
6. Basic Self-Protection Strategies
7. Advanced Code Evolution Techniques and Computer Virus Generator Kits
8. Classification According to Payload
9. Strategies of Computer Worms
10. Exploits, Vulnerabilities, and Buffer Overflow Attacks
Part II. Strategies of the Defender
11. Antivirus Defense Techniques
12. Memory Scanning and Disinfection
13. Worm-Blocking Techniques and Host-Based Intrusion Prevention
14. Network-Level Defense Strategies
15. Malicious Code Analysis Techniques
16. Conclusion
Index

Peter Szor takes you behind the scenes of anti-virus research, showing how they are analyzed, how they spread, and--most importantly--how to effectively defend against them. This book offers an encyclopedic treatment of the computer virus, including: a history of computer viruses, virus behavior, classification, protection strategies, anti-virus and worm-blocking techniques, and how to conduct an accurate threat analysis. The Art of Computer VirusResearch and Defense entertains readers with its look at anti-virus research, but more importantly, it truly arms them in the fight against computer viruses. As one of the lead researchers behind Norton AntiVirus, the most popular antivirus program in the industry, Peter Szor studies viruses every day. By showing how viruses really work, this book will help security professionals and students protect against them, recognize them, and analyze and limit the damage they can do.

Art of Computer Virus Research and Defense, The

About the Author
Foreword by Richard Bejtlich
Acknowledgments
Introduction
0. Malware Analysis Primer
Part 1. Basic Analysis
1. Basic Static Techniques
2. Malware Analysis in Virtual Machines
3. Basic Dynamic Analysis
Part 2. Advanced Static Analysis
4. A Crash Course in x86 Disassembly
5. IDA Pro
6. Recognizing C Code Constructs in Assembly
7. Analyzing Malicious Windows Programs
Part 3. Advanced Dynamic Analysis
8. Debugging
9. OllyDbg
10. Kernel Debugging with WinDbg
Part 4. Malware Functionality
11. Malware Behavior
12. Covert Malware Launching
13. Data Encoding
14. Malware-Focused Network Signatures
Part 5. Anti-Reverse-Engineering
15. Anti-Disassembly
16. Anti-Debugging
17. Anti-Viral Machine Techniques
18. Packers and Unpacking
Part 6. Special Topics
19. Shellcode Analysis
20. C++ Analysis
21. 64-Bit Malware
A. Important Windows Functions
B. Tools for Malware Analysis
C. Solutions to Labs
Index

Malware analysis is big business, and attacks can cost a company dearly. When malware breaches your defenses, you need to act quickly to cure current infections and prevent future ones from occurring.

For those who want to stay ahead of the latest malware, Practical Malware Analysis will teach you the tools and techniques used by professional analysts. With this book as your guide, you'll be able to safely analyze, debug, and disassemble any malicious software that comes your way.

You'll learn how to:
–Set up a safe virtual environment to analyze malware
–Quickly extract network signatures and host-based indicators
–Use key analysis tools like IDA Pro, OllyDbg, and WinDbg
–Overcome malware tricks like obfuscation, anti-disassembly, anti-debugging, and anti-virtual machine techniques
–Use your newfound knowledge of Windows internals for malware analysis
–Develop a methodology for unpacking malware and get practical experience with five of the most popular packers
–Analyze special cases of malware with shellcode, C++, and 64-bit code

Hands-on labs throughout the book challenge you to practice and synthesize your skills as you dissect real malware samples, and pages of detailed dissections offer an over-the-shoulder look at how the pros do it. You'll learn how to crack open malware to see how it really works, determine what damage it has done, thoroughly clean your network, and ensure that the malware never comes back.

Malware analysis is a cat-and-mouse game with rules that are constantly changing, so make sure you have the fundamentals. Whether you're tasked with securing one network or a thousand networks, or you're making a living as a malware analyst, you'll find what you need to succeed in Practical Malware Analysis.

Practical Malware Analysis: The Hands-On Guide to Dissecting Malicious Software 1st Edition

Foreword
Acknowledgments
Introduction
Part 1. Reversing 101
Chapter 1. Foundations
Chapter 2. Low-Level Software
Chapter 3. Windows Fundamentals
Chapter 4. Reversing Tools
Part II. Applied Reversing
Chapter 5. Beyond the Documentation
Chapter 6. Deciphering File Formats
Chapter 7. Auditing Program Binaries
Chapter 8. Reversing Malware
Chapter 9. Piracy and Copy Protection
Chapter 10. Antireversing Techniques
Chapter 11. Breaking Protections
Part IV. Beyond Disassembly
Chapter 12. Reversing .NET
Chapter 13. Decompilation
Appendix A. Deciphering Code Structures
Appendix B. Understanding Compiled Arithmetic
Appendix C. Deciphering Program Data
Appendix D. Citations
Index

Beginning with a basic primer on reverse engineering-including computer internals, operating systems, and assembly language-and then discussing the various
applications of reverse engineering, this book provides readers with practical, in-depth techniques for software reverse engineering. The book is broken into two parts, the first deals with security-related reverse engineering and the second explores the more practical aspects of reverse engineering. In addition, the author explains how to reverse engineer a third-party software library to improve interfacing and how to reverse engineer a competitor's software to build a better product.
* The first popular book to show how software reverse engineering can help defend against security threats, speed up development, and unlock the secrets of competitive products
* Helps developers plug security holes by demonstrating how hackers exploit reverse engineering techniques to crack copy-protection schemes and identify software targets for viruses and other malware
* Offers a primer on advanced reverse-engineering, delving into "disassembly"-code-level reverse engineering-and explaining how to decipher assembly language

Reversing: Secrets of Reverse Engineering 1st Edition

Introduction
I. An Introduction to Memory Forensics
1. Systems Overview
2. Data Structures
3. The Volatility Framework
4. Memory Acquisition
II. Windows Memory Forensics
5. Windows Objects and Pool Allocations
6. Processes, Handles, and Tokens
7. Process Memory Internals
8. Hunting Malware in Process Memory
9. Event Logs
10. Registry in Memory
11. Networking
12. Windows Services
13. Kernel Forensics and Rootkits
14. Windows GUI Subsystem, Part I
15. Windows GUI Subsystem, Part II
16. Disk Artifacts in Memory
17. Event Reconstruction
18. Timelining
III. Linux Memory Forensics
19. Linux Memory Acquisition
20. Linux Operating System
21. Processes and Process Memory
22. Networking Artifacts
23. Kernel Memory Artifacts
24. File Systems in Memory
25. Userland Rootkits
26. Kernel Mode Rootkits
27. Case Study: Phalanx2
IV. Mac Memory Forensics
28. Mac Acquisition and Internals
29. Mac Memory Overview
30. Malicious Code and Rootkits
31. Tracking User Activity
Index

Memory forensics provides cutting edge technology to help investigate digital attacks
Memory forensics is the art of analyzing computer memory (RAM) to solve digital crimes. As a follow-up to the best seller Malware Analyst's Cookbook, experts in the fields of malware, security, and digital forensics bring you a step-by-step guide to memory forensics—now the most sought after skill in the digital forensics and incident response fields.

Beginning with introductory concepts and moving toward the advanced, The Art of Memory Forensics: Detecting Malware and Threats in Windows, Linux, and Mac Memory is based on a five day training course that the authors have presented to hundreds of students. It is the only book on the market that focuses exclusively on memory forensics and how to deploy such techniques properly. Discover memory forensics techniques:

How volatile memory analysis improves digital investigations
Proper investigative steps for detecting stealth malware and advanced threats
How to use free, open source tools for conducting thorough memory forensics
Ways to acquire memory from suspect systems in a forensically sound manner
The next era of malware and security breaches are more sophisticated and targeted, and the volatile memory of a computer is often overlooked or destroyed as part of the incident response process. The Art of Memory Forensics explains the latest technological innovations in digital forensics to help bridge this gap. It covers the most popular and recently released versions of Windows, Linux, and Mac, including both the 32 and 64-bit editions.

The Art of Memory Forensics: Detecting Malware and Threats in Windows, Linux, and Mac Memory 1st Edition

Не IT-профессия

1С-Битрикс разработчик

Akka разработчик

Android разработчик

Angular разработчик

Ansible специалист

AR разработчик

AWS облачный архитектор

Azure облачный архитектор

Backend-разработчик

BI-аналитик

Blockchain разработчик

Cordova разработчик

Data engineer

Data Scientist

DevOps

DevSecOps инженер

Digital-специалист

Docker специалист

Drupal разработчик

Express.js разработчик

FastApi разработчик

Flask разработчик

Frontend-разработчик

Fullstack разработчик

Game дизайнер

Gin разработчик

Google Cloud облачный архитектор

Hibernate разработчик

Ionic разработчик

IT-специалист

Java программист

JavaScript программист

Joomla разработчик

Ktor разработчик

Kubernetes специалист

Linux/Unix системный администратор

MongoDB разработчик баз данных

NestJS разработчик

Next.js разработчик

Node.js разработчик

NoSQL разработчик баз данных

Nuxt.js разработчик

Play Framework разработчик

Product manager

Product Owner

Python программист

Quarkus разработчик

Rails разработчик

React разработчик

Scrum Master

SEO специалист

SMM-менеджер

Svelte разработчик

Symfony-разработчик

Terraform специалист

UI дизайнер

UI разработчик

Unity разработчик

UX дизайнер

VR разработчик

Vue.js разработчик

Web дизайнер

Windows системный администратор

WordPress разработчик

Xamarin разработчик

Yandex Cloud облачный архитектор

Yii разработчик

Zend-разработчик

Администратор баз данных

Администратор вычислительной сети

Администратор защиты

Администратор сайта

Аналитик 1С

Аналитик Big Data

Аналитик UX

Аналитик данных

Архитектор безопасности

Архитектор информационных систем

Бизнес аналитик

Веб-аналитик

Веб-мастер

Веб-разработчик

Верстальщик

Видеограф

Видеомонтажер

Визуализатор

Вирусный аналитик

Вконтакте таргетолог

Графический дизайнер

Дженералист (3D)

Дизайнер

Директор по безопасности

Директор по данным

Директор по информационным технологиям

Игровой аналитик

Инженер по машинному обучению

Инженер умных устройств

Интернет-маркетолог

Киберследователь

Развивайтесь в профессии Вирусный аналитик с помощью нашей подборки книг. Эти книги помогут вам освоить ключевые навыки и углубить знания, необходимые для успешной карьеры в Вирусный аналитик. Подходит для специалистов всех уровней!

Подборка лучших книг 📚 Вирусный аналитик — Рекомендуемая литература для профессии Вирусный аналитик | MyITcareer