"Symantec's chief antivirus researcher has written the definitive guide to contemporary virus threats, defense techniques, and analysis tools. Unlike most books on computer viruses, The Art of Computer Virus Research and Defense
is a reference written strictly for white hats: IT and security professionals responsible for protecting their organizations against malware. Peter Szor systematically covers everything you need to know, including virus behavior and classification, protection strategies, antivirus and worm-blocking techniques, and much more.
" Szor presents the state-of-the-art in booth malware and protection, providing the full technical detail that professionals need to handle increasingly complex attacks. Along the way, he provides extensive information on code metamorphism and other emerging techniques, so you can anticipate and prepare for future threats.
Part I Strategies of the attacker
1 Introduction to the games of nature
2 The fascination of malicious code analysis
3 Malicious code environments
4 Classification of infection strategies
5 Classification of in-memory strategies
6 Basic self-protection strategies
7 Advanced code evolution techniques and computer
virus generator kits
8 Classification according to payload
9 Strategies of computer worms
10 Exploits, vulnerabilities, and buffer overflow attacks
Part II Strategies of the defender
11 Antivirus defense techniques
12 Memory scanning and disinfection
13 Worm-blocking techniques and host-based
intrusion prevention
14 Network-level defense strategies
15 Malicious code analysis techniques
16 Conclusion