Könyv Network Virtualisation Helmut Petritsch

Network Virtualisation

Virtualising Network Traffic in Windows XP for Dynamic Malware Analysis

Szerző: Helmut Petritsch
Nyelv: Angol
Kötés: Puha kötésű
Elérhetőség: Beszállítói készleten
Küldés 14-21 napon belül
18 441 Ft
Could dynamic Malware analysis be more dynamic by §assigning network calls an injected result, defin...

Információk a könyvről

Nyelv
Angol
Kötés
Könyv - Puha kötésű
Kiadva
2008
oldal
92
EAN
9783836469197
ISBN
3836469197
Enbook ID
07046995
Súly
136
Méretek
152 x 229 x 5

Teljes leírás

Could dynamic Malware analysis be more dynamic by §assigning network calls an injected result, defined §by the analysis process? Yes, but only if the §network access was completely virtualised. This book §explains how this virtualisation could be achieved. §It starts with an instruction of dynamic Malware §analysis and the usage of sockets in the Windows §operating system. By using Qemu and TTAnalyze (a §tool for dynamic Malware analysis), it describes how §network access could be virtualised, so that system §calls relating to sockets (and therefore accessing §the network) are intercepted at the system call §gate, then manipulated and imitated for a dynamic §analysis. The book also defines the most important §synchronisation techniques of multi-threaded §applications for their (network) activities. The §reader will gain a thorough understanding, of how §high level functions of the Winsock library are §executed with the aim of system calls. Could dynamic Malware analysis be more dynamic by assigning network calls an injected result, defined by the analysis process? Yes, but only if the network access was completely virtualised. This book explains how this virtualisation could be achieved. It starts with an instruction of dynamic Malware analysis and the usage of sockets in the Windows operating system. By using Qemu and TTAnalyze (a tool for dynamic Malware analysis), it describes how network access could be virtualised, so that system calls relating to sockets (and therefore accessing the network) are intercepted at the system call gate, then manipulated and imitated for a dynamic analysis. The book also defines the most important synchronisation techniques of multi-threaded applications for their (network) activities. The reader will gain a thorough understanding, of how high level functions of the Winsock library are executed with the aim of system calls.

Érdekelheti

7 887 Ft

Recorder Fun! Beginner's Pack

Hal Leonard Publishing Corporation
6 019 Ft

Palm Beach, Finland

Antti Tuomainen
3 420 Ft

NationEUrope

Caroline Y. Robertson-Von Trotha
18 532 Ft
5 784 Ft

Rosy & John

Pierre Lemaitre
4 160 Ft
3 045 Ft

Legacy of Menace

Bobby Teale
6 759 Ft

Azok a vásárlók, akik ezt a könyvet megvásárolták, a következőket is megvásárolták

3 598 Ft

Meccanica dei materiali

Vincenzo De Luca
5 976 Ft
1 307 Ft
3 449 Ft

Rock Classics 2

Fernandez Miguel Angel
7 758 Ft
12 341 Ft

Fragments de Geo

Amael Cattaruzza
6 639 Ft

Ovunque tu sia

Harlan Coben
8 599 Ft

I Feel Shy: Me Siento Tímido

Abel Junior Tutagalevao
6 120 Ft

Weckrufe

Stefan Knobloch
9 905 Ft

Les Veillees Francaises

Poirie Saint-Aurele
7 873 Ft

Karikatur im 1. Weltkrieg

Ernst Schulz-Besser
6 874 Ft

Nouvelles du Temps qui passe

Michel Pain-Edeline
4 712 Ft