Assembly Language and Malware Reverse Engineering

Catalog description

Reverse engineering of malware is the process of examining the disassembled code of malware via a disassembler or hex editor to better understand the code logic. The analysis helps understand the behavior of the malware by executing it in a quarantined environment to prevent contamination of the rest of the environment. The behavior could include files accessed, network communication, and processes launched, etc. The class also covers fundamentals of assembly language and hex editing which are useful for the code analysis. Students will be able to use code disassemblers to generate assembly language code from machine-executable code. Students will also learn about different types of malware and how to fingerprint malware. Prerequisite(s): B FOR 204 and B FOR 206.