Timeline for How do cryptographic algorithms help hackers to bypass Antivirus software?
Current License: CC BY-SA 3.0
8 events
| when toggle format | what | by | license | comment | |
|---|---|---|---|---|---|
| Jul 1, 2015 at 0:39 | comment | added | Tomasz Klim | I can recommend anything written by Mark Russinovich, however it's definitely not enough. Search also for books about hardware architecture (focused on how CPU really works), and for something about LLVM - this will give you some knowledge about recent compilers. Then, prepare to dig into source code... | |
| Jul 1, 2015 at 0:00 | comment | added | etf | Do you have some suggestion about literature covering these fileds? I found "Windows Internals 6th Edition by Mark Russinovich, David Solomon and Alex Ionesc" | |
| Jun 30, 2015 at 17:12 | vote | accept | etf | ||
| Jun 30, 2015 at 17:09 | comment | added | Tomasz Klim | To write a good virus, you have to know, how computer works on hardware level, how compiler works (with low level details), how Windows kernel works, have very good understanding of various Windows APIs and antivirus engines. Fortunately there is lot of materials: Windows NT4 and 2000 source code leaked about 12 years ago, Kaspersky Antivirus and Norton Antivirus source code leaked a few years ago, and of course open source ClamAV and Windows SDKs. On the other side, this is too much for one person, that's why the best viruses (from already catched) are believed to be written by whole teams. | |
| Jun 30, 2015 at 16:21 | comment | added | etf | Thanks for reply. Besides that one has to know some programming language for this, what other skills should one have? Is it neccessary to have deep understanding of how Windows works (especially how .exe work, ie. what is happening when application is executed etc)? | |
| S Jun 27, 2015 at 19:23 | history | suggested | Vilican | CC BY-SA 3.0 |
Edited hair-pulling mistake
|
| Jun 27, 2015 at 19:02 | review | Suggested edits | |||
| S Jun 27, 2015 at 19:23 | |||||
| Jun 27, 2015 at 17:21 | history | answered | Tomasz Klim | CC BY-SA 3.0 |