RE: How to learn virus analysis

[Harris Samuel W PORT <HarrisSW () mail ports navy mil>]

I remember from my computer security classes in college a book called
something like "Little Black Book of Viruses" Can't remember who it was by,
but it was pretty informative. I think it might be available somewhere
online for free.

Sam

-----Original Message-----
From: John Sec [mailto:john_sec_lists () hotmail com]
Sent: Wednesday, August 27, 2003 10:42 AM
To: security-basics () securityfocus com
Subject: How to learn virus analysis


I would like to learn how to disassemble/analyze virii, trojans, etc.  I've 
been teaching myself C and Assembly, but I still have a long way to go.  Can

anybody recommend any books, tutorials, subjects, etc. that would point me 
in the right direction?  I know that it will take a lot of work before I get

to a point where I can do it, but I am really interested in it.

Thanks for any advice.

john

_________________________________________________________________
MSN 8: Get 6 months for $9.95/month. http://join.msn.com/?page=dept/dialup


---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), 
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier 
technical IT security event.  Modeled after the famous Black Hat event in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symantec is the Diamond sponsor.  Early-bird registration ends September
6.Visit us: www.blackhat.com
----------------------------------------------------------------------------


---------------------------------------------------------------------------
Attend Black Hat Briefings & Training Federal, September 29-30 (Training), 
October 1-2 (Briefings) in Tysons Corner, VA; the world's premier 
technical IT security event.  Modeled after the famous Black Hat event in 
Las Vegas! 6 tracks, 12 training sessions, top speakers and sponsors.  
Symantec is the Diamond sponsor.  Early-bird registration ends September 6.Visit us: www.blackhat.com
----------------------------------------------------------------------------