- CyberWar: Si Vis Pacem, Para Bellum CyberWar

Managed Code Rootkits: Hooking into Runtime Environments

Category: Books Tags: .NET, A8X, ADB, Android, Application, Attack, Back Door, back doors, Bluetooth, Compiler, Dalvik, development scenarios, Dropad, Froyo, GCC, Gingerbread, GPS, Hacker, Honeycomb, Java, Kernel, Malware, metula, new rootkit, ReFrameworker, Rootkit, rootkits, runtime environments, Samsung, security checks, Tools, Virtual, Virtual Machine, VM, VMware, War, Weapon, WiFi 1 Comment

Imagine being able to change the languages for the applications that a computer is running and taking control over it. That is exactly what managed code rootkits can do when they are placed within a computer. This new type of rootkit is hiding in a place that had previously been safe from this type of attack-the application level. Code reviews do not currently look for back doors in the virtual machine (VM) where this new rootkit would be injected. An invasion of this magnitude allows an attacker to steal information on the infected computer, provide false information, and disable security checks. Erez Metula shows the reader how these rootkits are developed and inserted and how this attack can change the managed code that a computer is running, whether that be JAVA, .NET, Android Dalvik or any other managed code. Management development scenarios, tools like ReFrameworker, and countermeasures are covered, making this book a one stop shop for this new attack vector.

Introduces the reader briefly to managed code environments and rootkits in general
Completely details a new type of rootkit hiding in the application level and demonstrates how a hacker can change language runtime implementation
Focuses on managed code including Java, .NET, Android Dalvik and reviews malware development scenarios

Price: $49.95

Click here to buy from Amazon

Mobile Malware Attacks and Defense

Category: Books Tags: A8X, ADB, Android, Attack, Cell Phone, Compiler, Dealextreme, Defense, device platform, Disassemble, Dropad, dynamic software, Examining, Exploit, Exploits, Firmware, Forensic, forensic analysis, Forensics, Froyo, GCC, Gingerbread, Google, hoaxes, Honeycomb, IDA, IDA Pro, iPad, iPhone, Kernel, Malicious Code, Malware, mitigation measures, Mobile, mobile assets, mobile device, mobile devices, MobileSandbox, os security, Payloads, PDA, PDAs, Phishing, Reverse Engineering, sandbox, security landscape, SMishing, SMS, software analysis, Symbian, Taxonomy, Threats, Virus, Vishing Leave a Comment

Malware has gone mobile, and the security landscape is changing quickly with emerging attacks on cell phones, PDAs, and other mobile devices. This first book on the growing threat covers a wide range of malware targeting operating systems like Symbian and new devices like the iPhone. Examining code in past, current, and future risks, protect your banking, auctioning, and other activities performed on mobile devices.

* Visual Payloads
View attacks as visible to the end user, including notation of variants.

* Timeline of Mobile Hoaxes and Threats
Understand the history of major attacks and horizon for emerging threates.

* Overview of Mobile Malware Families
Identify and understand groups of mobile malicious code and their variations.

* Taxonomy of Mobile Malware
Bring order to known samples based on infection, distribution, and payload strategies.

* Phishing, SMishing, and Vishing Attacks
Detect and mitigate phone-based phishing (vishing) and SMS phishing (SMishing) techniques.

* Operating System and Device Vulnerabilities
Analyze unique OS security issues and examine offensive mobile device threats.

* Analyze Mobile Malware
Design a sandbox for dynamic software analysis and use MobileSandbox to analyze mobile malware.

* Forensic Analysis of Mobile Malware
Conduct forensic analysis of mobile devices and learn key differences in mobile forensics.

* Debugging and Disassembling Mobile Malware
Use IDA and other tools to reverse-engineer samples of malicious code for analysis.

* Mobile Malware Mitigation Measures
Qualify risk, understand threats to mobile assets, defend against attacks, and remediate incidents.

* Understand the History and Threat Landscape of Rapidly Emerging Mobile Attacks

* Analyze Mobile Device/Platform Vulnerabilities and Exploits

* Mitigate Current and Future Mobile Malware Threats

Price: $59.95

Click here to buy from Amazon

Managed Code Rootkits: Hooking into Runtime Environments

Mobile Malware Attacks and Defense

Amazon Cyber Tools