The Good Hacker - Dismantling Web Malware
Explore a comprehensive conference talk on dismantling web malware, presented by Aditya K Sood and Richard J Enbody from SecNiche Security Labs and Michigan State University. Delve into the anatomy of malware, its real-world impact, and the underground malware market business. Examine the malware flow model and uncover the truth behind browser vulnerabilities. Learn about browser malware taxonomy, drive-by downloads, and website malware scanning in the cloud. Discover techniques for hunting web malware, including pattern detection and malware domain listing. Gain insights into dissecting traffic dumps, analyzing HTTP/HTTPS traffic, and extracting executables. Conclude with case studies on the Black Hole Exploit Pack and Botnet C&C SQL Injection, providing practical examples of malware dismantling techniques.