- Cover Page
- Title Page
- Copyright Page
- Dedication
- About the Authors
- About the Technical Reviewer
- BRIEF CONTENTS
- CONTENTS IN DETAIL
- FOREWORD
- ACKNOWLEDGMENTS
- ABBREVIATIONS
- INTRODUCTION
- PART I: ROOTKITS
- 1 WHAT’S IN A ROOTKIT: THE TDL3 CASE STUDY
- 2 FESTI ROOTKIT: THE MOST ADVANCED SPAM AND DDOS BOT
- 3 OBSERVING ROOTKIT INFECTIONS
- PART II: BOOTKITS
- 4 EVOLUTION OF THE BOOTKIT
- 5 OPERATING SYSTEM BOOT PROCESS ESSENTIALS
- 6 BOOT PROCESS SECURITY
- 7 BOOTKIT INFECTION TECHNIQUES
- 8 STATIC ANALYSIS OF A BOOTKIT USING IDA PRO
- 9 BOOTKIT DYNAMIC ANALYSIS: EMULATION AND VIRTUALIZATION
- 10 AN EVOLUTION OF MBR AND VBR INFECTION TECHNIQUES: OLMASCO
- 11 IPL BOOTKITS: ROVNIX AND CARBERP
- 12 GAPZ: ADVANCED VBR INFECTION
- 13 THE RISE OF MBR RANSOMWARE
- 14 UEFI BOOT VS. THE MBR/VBR BOOT PROCESS
- 15 CONTEMPORARY UEFI BOOTKITS
- 16 UEFI FIRMWARE VULNERABILITIES
- PART III: DEFENSE AND FORENSIC TECHNIQUES
- 17 HOW UEFI SECURE BOOT WORKS
- 18 APPROACHES TO ANALYZING HIDDEN FILESYSTEMS
- 19 BIOS/UEFI FORENSICS: FIRMWARE ACQUISITION AND ANALYSIS APPROACHES
- INDEX
ROOTKITS AND BOOTKITS
Reversing Modern Malware and Next Generation Threats
by Alex Matrosov, Eugene Rodionov, and Sergey Bratus
San Francisco
-
No Comment
..................Content has been hidden....................
You can't read the all page of ebook, please click here login for view all page.