Art of Computer Virus Research and Defense, The

Chapter 15. Malicious Code Analysis Techniques

“ Practice should always be based upon a sound knowledge of theory.”

—Leonardo da Vinci (1452–1519)

Previous chapters have discussed the different antivirus defense strategies. This chapter gives a short introduction to malicious code analysis, which can provide invaluable information to the defender. Although some of the methods and tools were demonstrated previously, this chapter discusses some of their more interesting aspects.

Some of the techniques described in this chapter relate to reverse engineering of malicious code. Because the relevant law differs from country to country, please be advised to follow your local requirements regarding it. I also regret that not all of the discussed techniques ...