Malware: Fighting Malicious Code

by Ed Skoudis, Lenny Zeltser

Malicious code is a set of instructions that runs on your computer and makes your system do something that you do not want it to do. For example, it can delete sensitive configuration files from your hard drive, rendering your computer completely inoperable; infect your computer and use it as a jumping-off point to spread to all of your buddies' computers; and steal files from your machine. Malicious code in the hands of a crafty attacker is indeed powerful. It's becoming even more of a problem because many of the very same factors fueling the evolution of the computer industry are making our systems even more vulnerable to malicious code. Specifically, malicious code writers benefit from the trends toward mixing static data and executable instructions, increasingly homogenous computing environments, unprecedented connectivity, an ever-larger clueless user base, and an unfriendly world. Skoudis addressed malicious code in just one chapter of his previous book. Here, a dozen chapters focus on one of the most interesting and rapidly developing areas of computer attacks.*Chapter 11, "Defender's Toolbox," rolls together the defensive strategies described in the book. As a bonus, Skoudis gives recipes for creating your own malicious code analysis laboratory using cheap hardware and software.

647 pages, Paperback

First published November 17, 2003

Reviews

[pandapoo · Rating 4 out of 5]

Great book, lots of information. Not a technical one (no source code, PoC, etc) but is into the point and gives an insight on computer malware and techniques used (most of them are now outdated).

[S · Rating 4 out of 5]

For a large computer book, this was very well written. It was concise, full of great examples, and gave me a great intro to malware. The version I read was from 2004, but it was still worth it. Most of the content still applies today in one form or another.

[Steve Schardein · Rating 3 out of 5]

A great introduction to the concept of malicious software. It's a good foundational reference for someone wanting to enter the study of malware and defense, though the modern iterations of the threats explained herein are much, much more sophisticated and would require an updated version of the book to be fully appreciated.

[Jim · Rating 1 out of 5]

Textbook for Capitol College's graduate program

[David · Rating 4 out of 5]

A good read back in the day.