Malware Analysis and Intrusion Detection

Quick information about the MAID exam: It will take place in HS002 in E1 3 on Monday Dec 12th at 9:00am sharp (s.t.). You can gain 90 points and will have 90 minutes to solve the exam. Closed-book exam: no material (except an English dictionary, if need be) will be allowed. We will provide you an Intel instruction reference for your convenience.

This is a gentle reminder for the MAID assignment deadline (Nov 27th 23:59 CET). We saw that many of you are quite active with the assignments, but we also saw that many of you did not solve them yet. Note that you can always ask questions via email (to me or even better to Giorgi <gmaisura@mmci.uni-saarland.de>) in case you get stuck or have technical difficulties. It is also OK to use Askbot, but do not spoil the solutions in your questions. May you do well!

Tomorrow at 1pm we will have a guest lecture to finish off the MAID lectures. I invited Dr. Christian Dietrich from Crowdstrike, a US-based cyber security company. Crowdstrike has been involved in many reversing-based analyses of state actor malware attacks. Short abstract of his talk:

  In this talk, Chris will outline evasion approaches that impede reverse
  engineering of in-the-wild malware binaries. Based on practical
  examples, we will revisit some of the techniques that were previously
  addressed in the lecture and attempt to find ways to overcome obstacles.
  Finally, Chris will provide some insights into real-world targeted attacks.

Do not miss this guest lecture, it is a unique chance for you to learn about the daily job of a world-leading reverse engineer.

The lectures tomorrow will be in HS001 in E1 3 again.