|
Malicious code is responsible for many of today's security problems. Understanding how it works can help in understanding and controlling the attacks on your computer. This course includes an examination of the processes of infection, replication, communication and coordination. In addition to the classroom instruction, this course contains instructor demonstration and hands-on labs.
We will examine current detection and irradication techniques and explore avoidance and prevention methods.
We'll review the history of malicious code, and introduce you to the taxonomy of malicious software. We will take a look at what malicious code does and how it works. Together, we'll examine the code of a number of well-known attacks and write our own programs to explore a variety of aspects of malicious code.
This detailed analysis will provide insight to the challenges faces in defeating mailicious code and provide the students the oppurtunity to explore defensive concepts.
The course topics include viruses, worms, Trojan horses, root kits, bots and other types of malicious code.
|
|
|
Course Content
|
| Trojan Horses |
 | Program Wrappers |
 | Command Substitution |
| Backdoors |
 | Network and Port-less |
 | Trapdoors |
|
| Rootkits |
 | User-mode Rootkits |
 | Kernel-mode Rootkits |
|
| Viruses |
 | Infection |
 | Propagation |
 | Evolution |
 | Payloads |
 | Defense |
|
| Worms |
 | Exploit |
 | Propagation |
 | Target Selection |
 | Scanning Engine |
 | Payloads |
 | Defense |
 | Future |
|
| Mobile Code |
 | Spyware |
 | Data Theft |
 | Resource Theft |
|
| Robots |
 | IRC Bots |
|
|
|
Who Should Attend
System administrators, web administrators, support analysts, network engineers and IT managers.
System administrators, network personnel, security personnel, savvy home computer users, and anyone else interested in keeping their systems safe from attackers.
Knowledge of software development and code a plus.
This is an advanced level course.
|