Software gets much of the hacking spotlight, perhaps understandably so. But the physical infrastructure that runs all that code is just as susceptible to messing with, though it takes a different set of knowledge and techniques. Today's Training trio touch on the more solid side of that divide.. So, the box sits in front of you, its secrets beckoning. Where to start? One great place would be Hands-On Hardware Hacking and Reverse Engineering, a Training which will teach hardware-hacking and reverse-engineering techniques commonly used against electronic products and embedded systems. Topics will include tool tutorials, circuit board analysis and modification, embedded security, and common attack vectors. Pay attention, because at the end you'll have to apply these skills to defeat the security of a custom circuit board. The link for this article located at Dark Reading is no longer available. . Exploring hardware manipulation and reverse engineering techniques can strengthen embedded system security. Tools like side-channel analysis and fault injection help identify vulnerabilities.. Hardware Hacking, Reverse Engineering, Embedded Protection. . Alex
Software reverse engineering, the art of pulling programs apart to figure out how they work, is what makes it possible for sophisticated hackers to scour code for exploitable bugs. It. At the SyScan conference next month in Singapore, security researcher Jacob Torrey plans to present a new scheme he calls Hardened Anti-Reverse Engineering System, or HARES. Torrey The link for this article located at Wired is no longer available. . Discover an innovative approach that has the potential to transform how software safeguards itself from reverse engineering, as introduced by Jacob Torrey.. Software Protection, Anti-Reverse Engineering, Cybersecurity Research. . LinuxSecurity.com Team
Wesley McGrew, a research assistant at Mississippi State University, may be among the few people thrilled with the latest grim report into a years-long hacking campaign against dozens of U.S. companies and organizations.. But McGrew's interest is purely academic: he teaches a reverse engineering class at the university, training 14 computer science and engineering students how to analyze malicious software. The link for this article located at Network World is no longer available. . McGrew instructs learners in malware examination via reverse engineering at the Mississippi State University course.. Malware Analysis, Cybersecurity Education, Reverse Engineering. . LinuxSecurity.com Team
PDFs are widely used business file format, which makes them a common target for malware attacks. On the surface, PDFs are secure, but because they have so many . By using a number of utilities, we are able to reverse engineer the techniques in malicious PDFs, providing insight that we can ultimately use to better protect our systems. The link for this article located at ThreatPost is no longer available. . Analyzing harmful PDF files enhances security against malware by revealing attack patterns and vulnerabilities, leading to better detection and proactive defenses.. PDF Security Threats, Malware Analysis, System Defense Techniques. . LinuxSecurity.com Team
A Playstation 3 hacker says he has released information about reverse engineering hypervisor technology used in the PS3 after his home in Germany was raided earlier this week, reportedly at Sony's request.. In a comment to a post on his PS3 Linux and Hyper Reverse Engineering Blog, Graf-chokolo writes in the comments section: "Guys, SONY was today at my home with police and got all my stuff and accounts. So be careful from now on." After several readers expressed doubt about the legitimacy of the post, he says in another comment: "Guys, I don't joke, it's serious. And to prove it, I kept my word and uploaded all my HV reversing stuff. Upload it everywhere so SONY couldn't remove it easily. Grab it guys, it contains lots of knowledge about HV and HV procs." The link for this article located at CNET is no longer available. . In a comment to a post on his PS3 Linux and Hyper Reverse Engineering Blog, Graf-chokolo writes in t. playstation, hacker, released, information, about, reverse, engineering, hypervisor, technol. . LinuxSecurity.com Team
A malware analyst has deconstructed a highly advanced piece of crimeware believed to be the work of the notorious Russian Business Network. The step-by-step instructions for reverse engineering the stealthy ZeroAccess rootkit is a blow to its developers, who took great care to make sure it couldn't be forensically analyzed.. The tutorial means other malware researchers may also study the malware to close in on the people behind it and to better design products that can safeguard against it. The analysis was written by Giuseppe Bonfa, a malware researcher specializing in reverse engineering at InfoSec Institute, an information security services company. It documents a rootkit that's almost impossible to remove without damaging the host operating system and uses low-level programming calls to create hard disk volumes that are virtually impossible to detect using normal forensic techniques. Sophos's description of the rootkit, which is also known as Smiscer, is here. The link for this article located at The Register UK is no longer available. . Unlock the skills to reverse engineer the ZeroAccess rootkit with this guided tutorial, enhancing your malware analysis and defensive strategies against threats. ZeroAccess Rootkit, Crimeware Analysis, Malware Research, Cybersecurity Insights. . LinuxSecurity.com Team
Networks of compromised computers controlled by a central server, better known as botnets, are a Swiss Army knife of tools for online criminals. Hackers can use these co-opted systems to churn out spam, host malicious code, hide their tracks on the Internet, or flood a corporate network to cut off its access to the Web.. Whenever a new botnet appears, researchers race to reverse engineer the software it installs on a victim's machine, and to decode the way each bot communicates with the controlling server. Because these communications are often encrypted, such analyses can take weeks or months. Now researchers from the University of California at Berkeley and Carnegie Mellon University have created a way to automatically reverse engineer the communications between compromised computers and their controlling servers. In a paper to be presented this week at the Association for Computing Machinery's Conference on Computer and Communications Security, the researchers show how automatic reverse engineering can decipher the structure and purpose of the communications between a command-and-control server and its bots. The link for this article located at Technology Review is no longer available. . Scientists reveal strategies for deconstructing malware interactions and strengthening defense mechanisms against cyber threats.. Botnet Analysis, Cybersecurity Research, Reverse Engineering Techniques, Network Security, Malicious Software Insights. . Alex
As JavaScript becomes an increasingly key component of online attacks, attackers are investing more energy in obfuscation and other techniques to make defenders' attempts at reverse engineering more difficult, a security researcher told attendees at the annual CanSecWest conference on Wednesday. . Attackers have adopted the same techniques used to hide the purpose of other types of malicious code, such as splitting up the code into many components and the use of custom encoders, to obfuscate JavaScript, said Jose Nazario, senior security engineer at network-protection firm Arbor Networks. Other advances include the addition of functions aimed at detecting any attempts at debugging or running the program in a virtual machine, he said. The link for this article located at SecurityFocus is no longer available. . Advancements in code encryption methods complicate the decryption of JavaScript scripts for security experts.. JavaScript Obfuscation,Cyberattack Strategies,Security Techniques. . LinuxSecurity.com Team
Get the latest Linux and open source security news straight to your inbox.