SEARCH RESULTS
 
Showing 1-10 of 223 records
 
Expand article

Anti-Debugging Series - Part I

2008-12-02 20:56:25 by Tyler Shields in Zero in a bit
 
For those that dont know, anti-debugging is the implementation of one or more techniques within computer code that hinders attempts at reverse engineering or debugging a target process. Typically this is achieved by detecting minute differences in memory, operating system, process information, latency, etc. that occur when a process is started...
 
Tags: process execution breaks, execution, process, methods query process, hardware breakpoint, hardware, process information, target process, methods
 
 
 
 
Expand article

The Commoditization of Anti Debugging Features in RATs

The Article has images
2008-09-03 07:46:00 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
Is it a Remote Administration Tool (RAT) or is it malware ? That's the rhetorical question , since RATs are not supposed to have built-in Virustotal submission for the newly generated server, antivirus software "killing" and firewall bypassing capabilities Taking a peek into some of commodity features aiming to make it harder to analyze the...
 
Tags: anti, anti vmware, anti norman sandbox, common malware tools, malware, anti virtualpc, malware coders, anti anubis sandbox, malware modulators
 
 
 
 
Expand article

Web Based Malware Emphasizes on Anti-Debugging Features

The Article has images
2008-10-07 02:42:00 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
Following the ongoing development of a particular web based malware, always comes handy in terms of assessing the commoditization of anti-debugging features within modern malware. With plain simple, "managed binary crypting and firewall bypassing verification" on demand in February, to August's overall anti antivirus software mentality as a key...
 
Tags: malware, web based malware, binary file, binary, simple, plain simple, anti, simple junk data, firewall
 
 
 
 
Expand article

Anti-Missile Technology on Commercial Aircraft

2008-01-18 11:29:06 by schneier in Schneier on Security
 
There have been stories previously , but this time it looks like it will actually happen : Up to three American Airlines jets carrying passengers will be outfitted with anti-missile technology this spring in the latest phase of testing technology to protect commercial planes from attack The technology is intended to stop a missile attack by...
 
Tags: missile, anti-missile technology, technology, missile attack, laser anti-missile system, attack, american airlines jets, protect commercial planes, laser beam
 
 
 
 
Expand article

The Commercialization of Anti Debugging Tactics in Malware

The Article has images
2008-09-29 16:55:54 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
Commoditization or commercialization, Themida or Code Virtualizer, individually crypting or outsourcing to an experienced malware crypting service offering discounts on a volume basis next to detection rates of the crypted binary offered by a trusted online scanner that is NOT distributing the samples to the vendors? These are just some of the...
 
Tags: machine, specific virtual machine, internal virtual machine, code, sensitive code, malware, unique virtual machine, original code, code virtualizer
 
 
 
 
Expand article

Commoditization of Anti Debugging Features in RATs - Part Two

The Article has images
2008-10-09 04:00:40 by Dancho Danchev in Dancho Danchev's Blog - Mind Streams of Information Security Knowledge
Yet another piece of malware promoted as a RAT (remote access tool) includes what's turning into the defacto set of anti-debugging features within RATs As the authors point out, the Anti Virtual PC, VMware, Virtualbox, Sandboxie, ThreatExpert, Anubis, CWSandbox, Joebox, Norman Sandbox features inevitably increase the server size. Next to the...
 
Tags: remote access tool, anti virtual, authors, features, defacto set, lower detection, rats, piece, sandboxie
 
 
 
 
Expand article

Anti-malware group sets product testing guidelines

2008-11-11 05:00:00 by Editor in Computerworld Security News
 
The Anti-Malware Testing Standards Organization said Monday that its membership had agreed on guidelines and principles for testing anti-malware products
 
Tags: anti-malware, anti-malware products, guidelines, standards organization, principles, membership, monday
 
 
 
 
Expand article

New Anti-Cross Site Scripting Library Available

2006-11-27 08:01:00 by Eric Marvets in The Security Samurai
 
For those of you who don't know, Cross Site Scripting or XSS is when an application displays input that originated from the client. This could be a URL, cookie variables, as well as form field variables. Virtually every site is susceptible to these types of attacks, regardless of the server or client environments On every penetration test I...
 
Tags: library, xss, xss attacks, anti-xss library, vulnerability, xss vulnerability, cross site, site, xss attack
 
 
 
 
Expand article

Peruvian Anti-Riot Police Uniforms: Judge Dredd Meets Batman

2008-02-04 20:10:03 by Editor in Digg / Security
 
These happy characters are Peruvian anti-riot police, who are here seen parading in celebration of Peru's independence day yesterday. Yes, they are terrifying. This makes Peru the latest entry in a long list of countries I will try to avoid rioting in. I'm still all about rioting in Canada and Sweden, however
 
Tags: peruvian anti-riot police, independence day yesterday, peru, happy characters, entry, avoid, celebration, canada, countries