How to defeat advanced malware : new tools for protection and forensics / Max, Dalziel.

Format:

Book

Author/Creator:

Dalziel, Max, author.

Language:

English

Subjects (All):

Computer networks--Security measures.

Computer networks.

Malware (Computer software).

Physical Description:

1 online resource (54 p.)

Edition:

1st edition

Other Title:

New tools for protection and forensics

Place of Publication:

Waltham, Massachusetts : Syngress, 2015.

Language Note:

English

System Details:

text file

Summary:

<i><b>How to Defeat Advanced Malware </b></i>is a concise introduction to the concept of micro-virtualization. The book provides current facts and figures that prove detection- based security products have become ineffective. A simple strategy is then presented that both leverages the opportunities presented by Bring Your Own Device (BYOD) and protects enterprise end users against advanced malware. The book concludes with case studies demonstrating how hardware- isolated micro-VMs are helping Fortune 500 financial service providers defeat advanced malware. This book is primarily designed fo

Contents:

Cover

Title Page

Copyright Page

Table of contents

Author Biography

Contributing Editor Biography

Chapter 1 - A Primer on Detection for Security

1.1 Today's approach: "compromise-first detection"

Chapter 2 - 2014 Endpoint Exploitation Trends

2.1 Zero-day trends

2.3 Emerging zero-day exploitation techniques

Chapter 3 - The Proposed Solution

3.1 The principle of least privilege

3.2 Detection's folly

Chapter 4 - Protection's Weak Link

4.1 Desktop virtualization does not secure the endpoint

4.2 Detection and isolation using VMs

Chapter 5 - Micro-Virtualization

5.1 Related work

5.2 A practical example

5.3 Hardware-enforced task isolation

5.4 Hardware virtualization technology

5.5 Micro-virtualization at work

5.6 The microvisor

5.7 Memory and CPU isolation

5.8 Virtualized file system (VFS)

5.9 Virtualized IP networking - the mobile SDN

5.10 Virtualized desktop services

5.11 Creation and management of micro-VMs

5.12 Reducing the attack surface

Chapter 6 - Advanced Forensics and Analysis

6.1 Micro-VM behavioral analysis

6.2 Advanced live forensics

6.3 LAVA architecture

6.4 Conclusion.

Notes:

Description based upon print version of record.

Includes bibliographical references.

Description based on online resource; title from PDF title page (ebrary, viewed January 10, 2015).

ISBN:

9780128027318

0128027312

9780128027530

0128027533

OCLC:

900652367