Network Virtualisation

Name: Network Virtualisation
Brand: VDM Verlag Dr. Mueller E.K.
SKU: 9783836469197
Price: 47.49 EUR
Availability: InStock

Virtualising Network Traffic in Windows XP for Dynamic Malware Analysis

Autor: Helmut Petritsch

Jazyk:

Väzba: Brožovaná

Vydavateľ: VDM Verlag Dr. Mueller E.K.

Dostupnosť: Skladom u dodávateľa

Odosielame za 9-15 dní

47.49 €

Could dynamic Malware analysis be more dynamic by §assigning network calls an injected result, defin...

Informácie o knihe

Autor

Helmut Petritsch

Jazyk

Angličtina

Väzba

Kniha - Brožovaná

Vydalo

2008

Stránok

EAN

9783836469197

ISBN

3836469197

Enbook ID

07046995

Vydavateľ

VDM Verlag Dr. Mueller E.K.

Hmotnosť

136

Rozmery

152 x 229 x 5

Kompletný popis

Could dynamic Malware analysis be more dynamic by §assigning network calls an injected result, defined §by the analysis process? Yes, but only if the §network access was completely virtualised. This book §explains how this virtualisation could be achieved. §It starts with an instruction of dynamic Malware §analysis and the usage of sockets in the Windows §operating system. By using Qemu and TTAnalyze (a §tool for dynamic Malware analysis), it describes how §network access could be virtualised, so that system §calls relating to sockets (and therefore accessing §the network) are intercepted at the system call §gate, then manipulated and imitated for a dynamic §analysis. The book also defines the most important §synchronisation techniques of multi-threaded §applications for their (network) activities. The §reader will gain a thorough understanding, of how §high level functions of the Winsock library are §executed with the aim of system calls. Could dynamic Malware analysis be more dynamic by assigning network calls an injected result, defined by the analysis process? Yes, but only if the network access was completely virtualised. This book explains how this virtualisation could be achieved. It starts with an instruction of dynamic Malware analysis and the usage of sockets in the Windows operating system. By using Qemu and TTAnalyze (a tool for dynamic Malware analysis), it describes how network access could be virtualised, so that system calls relating to sockets (and therefore accessing the network) are intercepted at the system call gate, then manipulated and imitated for a dynamic analysis. The book also defines the most important synchronisation techniques of multi-threaded applications for their (network) activities. The reader will gain a thorough understanding, of how high level functions of the Winsock library are executed with the aim of system calls.

Mohlo by vás zaujímať

Zákazníci, ktorí si kúpili túto knihu, kúpili tiež

Najčastejšie vyhľadávané

Categories

Authors

Publishers

Produkty

Produkty

Najčastejšie vyhľadávané

Categories

Authors

Publishers

Produkty

Produkty

Network Virtualisation

Virtualising Network Traffic in Windows XP for Dynamic Malware Analysis

Informácie o knihe

Kompletný popis

Mohlo by vás zaujímať

Zákazníci, ktorí si kúpili túto knihu, kúpili tiež