Malware Reverse Engineering
Faculty Profiles
Vladislav Stolyarov
Senior Security Engineer, Google
Victor Chebyshev
Research Development Team Lead at Kaspersky
Boris Larin
Malware analyst, Heuristics at Kaspersky
Course length
Duration
Total hours
Credits
Language
Course type
Fee for single course
Fee for degree students
Skills you’ll learn
Overview
The ability to dissect, analyse executables and scripts, as well as understand what they do, is becoming an important skill not only for an information security engineer, but for almost any IT related specialist. The hands-on, practice-oriented format of this course will allow students to rapidly obtain skills needed for static and dynamic analysis. As a result, students will gain a deeper and more thorough understanding of applications and operating systems, they would learn how to analyse and reverse engineer software, avoid common software bugs, exploited by attackers and build better, more secure application.
Learning highlights
- This course is meant as a practical course on malware reverse engineering and analysis for beginners. It will start with an introduction to the main concepts and terms needed, as well as an assembly language crash course for those with no prior experience. We will learn what approaches and tools can be used and how to perform static and dynamic analysis of malicious executables for multiple platforms – Windows, Linux, MacOS and Android. The course will also cover some of the more advanced topics on software vulnerabilities and exploits analysis, reverse engineering byte-code and script languages, automating reverse engineering tasks, unpacking, deobfuscating and dynamic binary instrumentation.
Course outline
4 classes
Introduction to the main reverse engineering concepts and terms
Setting up needed software and safe environment. Processor architectures, CISC vs RISC, data types, endianness, main purpose hardware registers, virtual memory and memory addressing, stack and stackframe.
Introduction to x86 and x64 Architecture and Assembly
Function epilogue and prologue. Calling conventions. Register set and instruction set. Finding C code constructs in Assembly. Practice: Assembly Hands-on and Exercises.
Windows OS Architecture and Static Analysis
Windows Architecture overview. Kernel mode vs user mode. Portable Executable file format. Compiler, Assembler and Linker. Practice: Working with PE files, Determining compiler, Quick static malware analysis. Reverse Engineering C and C++ code using HIEW and IDA Pro.
Dynamic Analysis and Debugging
Monitoring Windows APIs. Using system monitoring utilities to capture file system, registry and network activity. Debugging windows applications using x64dbg, windbg. Practice: Dynamic malware analysis and debugging exercises. Determining sample functionality.
Prerequisites
This course is one of three in a wholistic series.
Students that have already taken MSL-111 and those with prior experience with HTML, CSS, and Javascript building simple web pages will be good candidates for this module.
Vlad is focused on all sorts of vulnerability research, advanced exploit detection and prevention. Active CTF contests player.
Received bachelor and master's degrees from Moscow Technical University of Communications and Informatics and Higher School of Economics universities.
See full profileVictor Chebyshev is a Security Expert at Kaspersky, where he researches for mobile malware. He graduated from Moscow Institute of Electronics and Mathematics. During his studying, he became interested in reverse engineering and malware analysis.
After graduation, he changed several jobs before landing his position as Information Security Specialist. Kaspersky hired Chebyshev as Junior Malware Analyst in January 2009.
See full profileBoris has more than 7 years of experience in Reverse Engineering. His work on a subject of code deobfuscation won the contest among others 3000 submissions in International Cyber World Competition.
In Kaspersky Lab he is responsible for detection and prevention of advanced threats such as exploits with all modern antivirus technologies.
See full profileApply for this course
Malware Reverse Engineering
by Vladislav Stolyarov, Victor Chebyshev, Boris Larin
Total hours
45 Hours
Dates
Mar 12 - Mar 30, 2018
Fee for single course
€1500
Fee for degree students
€750
How to secure your spot
Complete the form below to kickstart your application
Schedule your Harbour.Space interview
If successful, get ready to join us on campus
FAQ
Will I receive a certificate after completion?
Yes. Upon completion of the course, you will receive a certificate signed by the director of the program your course belonged to.
Do I need a visa?
This depends on your case. Please check with the Spanish or Thai consulate in your country of residence about visa requirements. We will do our part to provide you with the necessary documents, such as the Certificate of Enrollment.
Can I get a discount?
Yes. The easiest way to enroll in a course at a discounted price is to register for multiple courses. Registering for multiple courses will reduce the cost per individual course. Please ask the Admissions Office for more information about the other kinds of discounts we offer and what you can do to receive one.