Ethical Hacking

Learn to find vulnerabilities before the bad guys do! Gain real world hands on hacking experience in our state of the art hacking lab. Course designed and taught by expert instructors with years of penetration testing experience. 12 student maximum in every class. Certification attempt included in every package.
Computer Forensics Training at InfoSec Institute

Gain the in-demand skills of a certified computer examiner, learn to recover trace data left behind by fraud, theft, and cybercrime perpetrators. Discover the source of computer crime and abuse at your organization so that it never happens again. All of our class sizes are guaranteed to be 12 students or less to facilitate one-on-one interaction with one of our expert instructors.




Network Security Focus-Virus
[Top] [All Lists]
<prev [Date] next>
[Advanced]
 <prev [Thread] next>

Re: Playing with Viruses on windows

from [Nick FitzGerald] Network Security [Permanent Link]
Subject: Re: Playing with Viruses on windows
Date: Thu, 12 Aug 2004 09:37:33 +1200 
H Carvey wrote:


Well, I'd go w/ the VMWare option to begin with, ...  

<<much good stuff snipped>>

You forgot the most important thing -- set this all up isolated from 
the Internet and any other network with "production" machines...  

And, of course, dynamic black-box analysis that such a setup as this 
affords can be insufficient.  What if the program you are trying to 
analyse detects it is running under VMWare and simply exits, or runs a 
"harmless" (or otherwise different) code branch than it runs when not 
in a VM??  

I know Harlan knows this -- note his "to begin with" comment -- but to 
the neophyte "analyst" who asks such questions on a mailing list, the 
significance of that understated comment may have been lost...


-- 
Nick FitzGerald
Computer Virus Consulting Ltd.
Ph/FAX: +64 3 3529854
[More with this subject...]




<Prev in Thread] Current Thread [Next in Thread>
Previous by Date:  Re: Playing with Viruses on windows, Ismael Briones
Next by Date:  Re: Scanning webpages for viruses and other malicious content, Jeff Falgout
Previous by Thread:  Re: Playing with Viruses on windows, H Carvey
Next by Thread:  RE: Playing with Viruses on windows, Altheide, Cory B. (IARC)
Indexes:  [Date] [Thread] [Top] [All Lists]