恶意代码分析实战
Practical Malware Analysis
Michael Sikorski、Andrew Honig · 初版 2012 年
13人推荐
16位读者提及
19次提及
为什么值得读
- 恶意代码分析领域广受认可的入门指南
- 内容注重实操，紧贴安全从业真实场景
- 与逆向工程技巧结合紧密，实用性强
恶意代码分析蕴含着巨大的商业价值，而安全攻击往往会让企业付出惨痛代价。当恶意代码突破你的防线时，你必须迅速行动以消除当前感染并防患于未然。对于那些希望走在最新恶意软件前沿的人群，《Practical Malware Analysis》将为你传授专业分析师所使用的工具与技术。以本书为指南，你将能够安全地分析、调试和反汇编遇到的任何恶意软件。你将学会如何：——搭建用于分析恶意软件的安全虚拟环境；——快速提取网络特征
Hacker News 上怎么说
正在加载完整评论……
……如果感兴趣就读，不感兴趣就跳过。2. 《The Art of Memory Forensics》——与其读这本，不如考虑读读《The Art of Software Security Assessment》（内容更严谨硬核）或者《Practical Malware Analysis》。3. 《The Art of Deception》——关于 Social Engineering 的评价见上文。4. 《Applied Cryptography》——《Cryptography Engineering》已经完全取代了它并使其过时，毫无疑问。_________________ 未列出的书目……
…If it interests you, read it; if it doesn't, skip it. 2. The Art of Memory Forensics - Instead of reading this, consider reading The Art of Software Security Assessment (a more rigorous coverage) or Practical Malware Analysis. 3. The Art of Deception - See above for Social Engineering. 4. Applied Cryptography - Cryptography Engineering supersedes this and makes it obsolete, full stop. _________________ What's Not Listed…
……网络安全类书籍，按被提及的频率排序：Stuart McClure 的《Hacking Exposed 7》，Kim Zetter 的《Countdown to Zero Day》，Kevin Mitnick 的《Ghost in the Wires》，Brian Krebs 的《Spam Nation》，Michael Sikorski 的《Practical Malware Analysis》，Adam Shostack 的《Threat Modeling》，Christopher Hadnagy 的《Social Engineering》，Peter Kim 的《The Hacker Playbook 3》，Richard Bejtlich 的《The Practice of Network Security Monitoring》，Dark……
…books on cybersecurity sorted by how often they were mentioned. Hacking Exposed 7 by Stuart McClure Countdown to Zero Day by Kim Zetter Ghost in the Wires by Kevin Mitnick Spam Nation by Brian Krebs Practical Malware Analysis by Michael Sikorski Threat Modeling by Adam Shostack Social Engineering by Christopher Hadnagy The Hacker Playbook 3 by Peter Kim The Practice of Network Security Monitoring by Richard Bejtlich Dark…
《Practical Malware Analysis》——Michael Sikorski 和 Andrew Honig 写的书
Practical Malware Analysis - book by Michael Sikorski and Andrew Honig
……即便他们不是做安全方向的。6. 《Gray Hat Python》非常注重实操，很好地介绍了逆向工程的方方面面，以及顶级公司的安全顾问等岗位通常会做的工作。7. 《Practical Malware Analysis》非常棒的恶意软件分析入门书。8. 《Practical Reverse Engineering》这本书配合第 9 本，能教会你针对安全领域进行有效软件逆向所需掌握的全部知识……
…even if they don't work in security. 6. Gray Hat Python Very hands on, good introduction to aspects of reverse engineering and the typical work an e.g. security consultant will do at a top firm. 7. Practical Malware Analysis Very good introduction to malware analysis. 8. Practical Reverse Engineering This book, along with #9 will teach you everything you need to know to effectively reverse engineer software for security-focused…
除了已经提到的资源外，Yurichev 的书 [1] 非常有帮助。还有 Sikorski 和 Honig 写的《Practical Malware Analysis》[2]。[1] https://beginners.re/ [2] https://www.amazon.com/Practical-Malware-Analysis-Hands-Diss...
Apart from the resources already mentioned, the book by Yurichev [1] was very helpful. Also, Practical Malware Analysis by Sikorski and Honig [2]. [1] https://beginners.re/ [2] https://www.amazon.com/Practical-Malware-Analysis-Hands-Diss...
当年我对恶意软件分析产生兴趣时买了《Practical Malware Analysis》这本书，必须说它写得实在太棒了。分析恶意软件需要一整套不同技术领域的知识，而这本书把它们介绍得非常到位。不过最爽的还是书中提供的那些恶意软件样本……
Back when I took an interest in malware analysis I got the book Practical Malware Analysis and must say it really was brilliant. Analyzing malware requires knowledge of a range of different technical areas, and the book introduced them well. The best thing though are the malware samples supplied…