PPT-Malware detection

with OSSEC santiagobassett Setting up a malware lab santiagobassett MW c ollection techniques santiagobassett Honeypot santiagobassett Dionaea Low interaction honeypot that emulates vulnerable network services. MARS.MTC.SRI.COM. Motivation. Malware landscape is diverse and constant evolving. Large botnets. Diverse propagation vectors, exploits, C&C. Capabilities – backdoor, keylogging, rootkits,. Logic bombs, time-bombs. Newbies. A guide for those of you who want to break into the fun world of malware.. What We’re Going To Cover. Basic x86/64 ASM. Tools of the trade. Setting up an environment. Intro to the Debugger . Connor Schnaith, Taiyo Sogawa. 9 April 2012. Motivation. “. 5. 000 . new. malware samples per day”. --David Perry of Trend Micro. Large variance between attacks. Polymorphic attacks . Perform the same function. CS 598: Network Security. Michael Rogers & Leena Winterrowd. March 26, 2013. Types of Malware. Image courtesy of prensa.pandasecurity.com. Types of Malware. Viruses 16,82%. Trojan horses. 69.99%. Our Focus. Victim. Attacker. Malicious. Web. Exploit. browser. Phishing. Exploit. vulnerability. Code Repo. Database. Malware . propagation. Initial Compromise. Gaining Foothold. Lateral Movement. High Value Asset Acquisition. 2013 international conference on computing , networking and communications, communications and information security symposium. Author : . Saeed. . Nari. , Ali A. . Ghorbani. . /17. 1. Speaker : Wen Lin Yu . Suman Jana and Vitaly Shmatikov. The University of Texas at Austin. All about sophisticated detection and evasion techniques. Polymorphism, metamorphism, obfuscation… . Modern malware research. All about sophisticated detection and evasion techniques. CS 598: Network Security. Michael Rogers & Leena Winterrowd. March 26, 2013. Types of Malware. Image courtesy of prensa.pandasecurity.com. Types of Malware. Viruses 16,82%. Trojan horses. 69.99%. Newbies. A guide for those of you who want to break into the fun world of malware.. What We’re Going To Cover. Basic x86/64 ASM. Tools of the trade. Setting up an environment. Intro to the Debugger . Spam:. Spam is unsolicited or undesired electronic junk mail. Characteristics of spam are:. Mass . mailing to large number of recipients. Usually a commercial advertisement. Annoying but usually harmless unless coupled with a fraud based phishing scam . Spam:. Spam is unsolicited or undesired electronic junk mail. Characteristics of spam are:. Mass . mailing to large number of recipients. Usually a commercial advertisement. Annoying but usually harmless unless coupled with a fraud based phishing scam . Nael Abu-Ghazaleh. Joint work with Khaled . Khasawneh. , Dmitry . Ponomarev. and Lei Yu. Malware is Everywhere!. Malware is Everywhere!. Over 250,000 malware registered every day! . Hardware Malware Detectors (HMDs). Grace. M, Zhou. Y, . Shilong. . Z, Jiang. . X. RiskRanker. analyses the paths within an android application. Potentially malicious security risks are flagged for investigation. Summary. This application showcases how reverse engineering. Analysts. “Decrease exposure time from . d. etection to . e. radication”. Garrett Schubert – EMC Corporation. Critical Incident Response Center. Incident Response\Content Lead. Surgery on the front lines.