- Taschenbuch: 92 Seiten
- Verlag: Vdm Verlag Dr. Müller (4. April 2008)
- Sprache: Englisch
- ISBN-10: 3836469197
- ISBN-13: 978-3836469197
- Größe und/oder Gewicht: 22,9 x 15,2 x 0,5 cm
- Amazon Bestseller-Rang: Nr. 1.981.074 in Englische Bücher (Siehe Top 100 in Englische Bücher)
|
||||||||||||||||||||
|
||||||||||||||||||||
|
||||||||||||||||||||
Produktinformation |
Produktbeschreibungen
Kurzbeschreibung
Could dynamic Malware analysis be more dynamic by
assigning network calls an injected result, defined
by the analysis process? Yes, but only if the
network access was completely virtualised. This book
explains how this virtualisation could be achieved.
It starts with an instruction of dynamic Malware
analysis and the usage of sockets in the Windows
operating system. By using Qemu and TTAnalyze (a
tool for dynamic Malware analysis), it describes how
network access could be virtualised, so that system
calls relating to sockets (and therefore accessing
the network) are intercepted at the system call
gate, then manipulated and imitated for a dynamic
analysis. The book also defines the most important
synchronisation techniques of multi-threaded
applications for their (network) activities. The
reader will gain a thorough understanding, of how
high level functions of the Winsock library are
executed with the aim of system calls.
assigning network calls an injected result, defined
by the analysis process? Yes, but only if the
network access was completely virtualised. This book
explains how this virtualisation could be achieved.
It starts with an instruction of dynamic Malware
analysis and the usage of sockets in the Windows
operating system. By using Qemu and TTAnalyze (a
tool for dynamic Malware analysis), it describes how
network access could be virtualised, so that system
calls relating to sockets (and therefore accessing
the network) are intercepted at the system call
gate, then manipulated and imitated for a dynamic
analysis. The book also defines the most important
synchronisation techniques of multi-threaded
applications for their (network) activities. The
reader will gain a thorough understanding, of how
high level functions of the Winsock library are
executed with the aim of system calls.
Synopsis
Could dynamic Malware analysis be more dynamic by assigning net--work calls an injected result, defined by the analysis process? Yes, but only if the network access was completely virtualised. This book explains how this virtualisation could be achieved. It starts with an instruction of dynamic Malware analysis and the usage of sockets in the Windows operating system. By using Qemu and TTAnalyze (a tool for dynamic Malware analysis), it describes how network access could be virtualised, so that system calls relating to sockets (and therefore accessing the network) are intercepted at the system call gate, then manipulated and imitated for a dynamic analysis. The book also defines the most important synchronisation techniques of multi-threaded applications for their (network) acti--vities. The reader will gain a thorough understanding, of how high level functions of the Winsock library are executed with the aim of system calls.
Tags(Was ist das?)Bei einem Tag handelt es sich um ein Schlagwort, das zum Produkt passt.
Tags erleichtern allen Kunden die Suche und die Sortierung ihrer Lieblingsprodukte. |
Eine digitale Version dieses Buchs im Kindle-Shop verkaufen
Wenn Sie ein Verleger oder Autor sind und die digitalen Rechte an einem Buch haben, können Sie die digitale Version des Buchs in unserem Kindle-Shop verkaufen.
Weitere Informationen
Kundenrezensionen
Noch keine Kundenrezensionen vorhanden.
5 Sterne
4 Sterne
3 Sterne
2 Sterne
1 Sterne
Kunden diskutieren
|
Das Forum zu diesem Produkt
Fragen stellen, Meinungen austauschen, Einblicke gewinnen Aktive Diskussionen in ähnlichen Foren
Kundendiskussionen durchsuchen
|
Ähnliche Foren
|
||||||||||||||||||||||||||||||||||
Lieblingslisten
Ähnliche Artikel finden
Anhand des Sachgebietes nach ähnlichen Produkten suchen:
Ihr Kommentar
Möchten Sie die Produktinformationen aktualisieren oder Feedback zu den Produktabbildungen geben?
|
