Hey, I'm on Twitter

Fighting Malicious Software

These articles and notes describe my perspective on malware threats and associated defensive techniques.

What to Include in a Malware Analysis Report

This note summarizes my recommendations for what to include in the report that describes the results of the malware analysis process.

Updates from Twitter Users Who Cover Malware

I maintain a list of Twitter users whose updates focus on malicious software threats and defenses. You can use this page to read the latest updates from these individuals.

On-Line Tools for Malicious Website Lookups

Several organizations offer free on-line tools for looking up a potentially malicious website. Some of these tools provide historical information; others examine the URL in real time to identify threats.

Blocklists of Suspected Malicious IPs and URLs

Several organizations maintain and publish blocklists/blacklists of IP addresses and URLs of systems and networks suspected in malicious activities on-line. This brief note mentions several such publicly-available lists.

Automated Malware Analysis Services

This brief note provides a listing of freely-available services that automate key behavioral analysts tasks for malicious software.

Stopping Malware on its Tracks

This article presents recommendations for addressing the risks associated with modern malware. Stopping malware requires an approach grounded in awareness and control.

Reverse-Engineering Cheat Sheet

This is a cheat sheet of shortcuts and tips for reverse-engineering malware. It covers the general malware analysis process, as well as useful tips for OllyDbg, IDA Pro, and other tools.

Using VMware for Malware Analysis

This article describes an approach to using VMware virtualization for setting up a malware analysis sandbox.

Reverse-Engineering Malware Paper

This paper defines a framework for using easily-accessible tools and a dual-phased approach to examine malware such as viruses, worms, and trojans.

The Evolution of Malicious Agents

This article examines the evolution of malicious agents by analyzing popular viruses, worms, and trojans, and detailing the possibility of a new breed of malicious software.