Everything about Malware analysis
Examination of malicious software to understand its functionality and behaviour
Malware analysis is the study or process of determining the functionality, origin and potential impact of a given malware sample, such as a virus, worm, Trojan horse, rootkit or backdoor. Malware, or malicious software, is any computer software intended to harm the host operating system or to steal sensitive data from users, organizations or companies. Malware may include software that gathers user information without permission. Malware analysis supports incident response by helping investigators identify infections, assess their consequences and plan containment and recovery. Wikipedia →
🧭 Start here: a 6-step reading path
- Read the overview: Malware analysisA 5-minute orientation
- Skim a recent paper: Nebula: Self-Attention for Dynamic Malware AnalysisInfluential work since 2022
- Pick up a classic book: Detection of Intrusions and Malware, and Vulnerability AssessmentThe most-reprinted book on the subject
- Read the landmark paper: Malware Analysis and Classification: A SurveyCited 252 times
- Go sideways: Indicator of compromiseA closely related topic
- Go sideways: MalwareA closely related topic
📖 Definitions
No dictionary entry for this exact phrase.
🗂️ The subject at a glance
🏆 Landmark papers (most cited)
Malware Analysis and Classification: A Survey
Malware Dynamic Analysis Evasion Techniques
Malware behaviour analysis
The rise of “malware”: Bibliometric analysis of malware study
Impeding behavior-based malware analysis via replacement attacks to malware specifications
A basic malware analysis method
Framework for malware analysis in Android
Hypervisor-assisted dynamic malware analysis
🆕 Influential since 2022
Nebula: Self-Attention for Dynamic Malware Analysis
Android malware analysis in a nutshell
SoK: Leveraging Transformers for Malware Analysis
Robustness analysis of CPPS against malware attacks under malware incubation and attack–defense confrontation
Efficient Malware Analysis Using Metric Embeddings
📚 Books worth reading
Detection of Intrusions and Malware, and Vulnerability AssessmentThorsten Holz · 2011
Phishing ExposedLance James · 2005
Ranked by number of editions on Open Library, a rough measure of how lasting a book is.
🔗 Related topics
- Indicator of compromise In cybersecurity and computer forensics, an indicator of compromise (IoC) is a technical artifact or observable event on a computer network or system that…
- Malware Malware (a portmanteau of malicious software) is any software intentionally designed to cause disruption or destruction to a computer, server, client,…
- Software understanding Software understanding is the analysis and interpretation of software systems' behavior, structure, and functionality, particularly when dealing with incomplete…
- Antivirus software Antivirus software (abbreviated to AV software), also known as anti-malware, is software intended to prevent, detect, and remove malware. Antivirus software…
- Stegomalware Stegomalware is a form of malicious software that leverages steganography techniques to conceal its code, configuration data, or command-and-control (C&C)…
- Threat hunting In information security, threat hunting is the process of proactively searching for threats against computer systems in order to protect them. This is…
- Vulnerability management Vulnerability management is the "cyclical practice of identifying, classifying, prioritizing, remediating, and mitigating" software vulnerabilities, which…
- Malware research The notion of a self-reproducing computer program can be traced back to initial theories about the operation of complex automata. John von Neumann showed…