A critical skill within the cybersecurity field is to understand software of either unknown origin or when its source code is unavailable to assess the existence of malicious code. Students will be able to use tools to perform mostly static and limited dynamic analysis of software in an attempt to understand its functionality, both expected and abnormal.
Prerequisites:
CSE 274 and CSE 381
Learning Outcomes:
Explain basic static and dynamic malware analysis.
Analyze assembly code of software and demonstrate the ability to trace assembly code to probable language-specific code.
Use existing tools such as IdaPro and OllyDBG to analyze object code.
Demonstrate the ability to identify malicious errors.
Explain basic classification of known malware strategies.
Topics:
Basic Static Analysis
Basic Dynamic Analysis
Source code translation to an intermediate language
General assembly structure
Use of IdaPro
Recognizing source code in assembly
Analyzing malicious Windows code
Using a debugger to analyze code
Use of OllyDBG
Malware behavior
Department of Computer Science and Software Engineering
