jetlib.sec » Tags » peter-silberman

Authors: Jamie Butler Peter Silberman
Tags: rootkit
Event: Black Hat EU 2006

Tags:  rootkit analysis raide jamie-butler peter-silberman black-hat silberman slides  

Authors: Peter Silberman
Tags: rootkit
Event: Black Hat USA 2006

Tags:  rootkit analysis raide peter-silberman usa black-hat silberman slides  

Authors: Peter Silberman Richard Johnson
Tags: buffer overflow
Event: Black Hat USA 2004

Tags:  buffer overflow paper peter-silberman richard-johnson-tags usa buffer-overflow richard-johnson black-hat  

Authors: Peter Silberman Richard Johnson
Tags: buffer overflow
Event: Black Hat USA 2004

Tags:  comparison buffer overflow peter-silberman richard-johnson-tags usa buffer-overflow richard-johnson black-hat  

Authors: Peter Silberman
Tags: malware malware analysis
Event: Black Hat DC 2009

Tags:  malware audio snort peter-silberman black-hat silberman  

Authors: Peter Silberman
Tags: malware malware analysis
Event: Black Hat DC 2009

Tags:  malware video snort peter-silberman black-hat silberman memory  

Authors: Peter Silberman Ero Carrera
Tags: malware malware analysis
Event: Black Hat EU 2010
Abstract: Over the last few years malware has gravitated towards a few major families rather than the single or small-sized families of the past. Families of hundreds or even thousands are not uncommon. These families grouped together demonstrate the evolution of malware over time. This evolution may originate in simple bugfixes and small enhancements or entirely new sets of functionality added over an existing code base. Studying the ties between families, both within and across families, provides us with a context in which to study the development pace and technical improvements as they appear. We will examine how families grow and change amongst the mass malware and targeted attack malware. While examining how families grow and change we will attempt to identify features across all families that are both common and implemented in the same way. This could lead to quick static identification of malware features as well as signaturing these features. We hope to show how multiple families are derived from one code base, we will not just address mass malware, targeted malware but also rootkits and code sharing amongst them.

Tags:  evolution code malware peter-silberman sized-families technical-improvements family-ties  

Authors: Peter Silberman Ero Carrera
Tags: malware malware analysis
Event: Black Hat EU 2010
Abstract: Over the last few years malware has gravitated towards a few major families rather than the single or small-sized families of the past. Families of hundreds or even thousands are not uncommon. These families grouped together demonstrate the evolution of malware over time. This evolution may originate in simple bugfixes and small enhancements or entirely new sets of functionality added over an existing code base. Studying the ties between families, both within and across families, provides us with a context in which to study the development pace and technical improvements as they appear. We will examine how families grow and change amongst the mass malware and targeted attack malware. While examining how families grow and change we will attempt to identify features across all families that are both common and implemented in the same way. This could lead to quick static identification of malware features as well as signaturing these features. We hope to show how multiple families are derived from one code base, we will not just address mass malware, targeted malware but also rootkits and code sharing amongst them.

Tags:  evolution code malware peter-silberman sized-families technical-improvements family-ties