- Apr 9, 2020
- 656
- Content source
- https://youtu.be/gO62-0OtvTQ
What are malware vaccines and how do they work? What types of vaccines exist? What are their pros and cons?
References:
EmoCrash, Emotet vaccine: EmoCrash: Exploiting a Vulnerability in Emotet Malware for Defense - Binary Defense
STOP/DJVU ransomware vaccine: GitHub - struppigel/STOP-DJVU-Ransomware-Vaccine: Vaccine for STOP/DJVU ransomware, prevents encryption
Paper: A. Wichmann and E. Gerhards-Padilla, "Using Infection Markers as a Vaccine against Malware Attacks," 2012 IEEE International Conference on Green Computing and Communications, 2012, pp. 737-742, doi: 10.1109/GreenCom.2012.121.
00:00 intro
00:05 definition
00:46 paper about infection marker extraction
01:30 vaccine ingredients
04:25 vaccine taxonomy
07:11 STOP/DJVU ransomware vaccine
08:10 pros and cons of vaccines
10:16 train your analysis skills by finding vaccines
References:
EmoCrash, Emotet vaccine: EmoCrash: Exploiting a Vulnerability in Emotet Malware for Defense - Binary Defense
STOP/DJVU ransomware vaccine: GitHub - struppigel/STOP-DJVU-Ransomware-Vaccine: Vaccine for STOP/DJVU ransomware, prevents encryption
Paper: A. Wichmann and E. Gerhards-Padilla, "Using Infection Markers as a Vaccine against Malware Attacks," 2012 IEEE International Conference on Green Computing and Communications, 2012, pp. 737-742, doi: 10.1109/GreenCom.2012.121.
00:00 intro
00:05 definition
00:46 paper about infection marker extraction
01:30 vaccine ingredients
04:25 vaccine taxonomy
07:11 STOP/DJVU ransomware vaccine
08:10 pros and cons of vaccines
10:16 train your analysis skills by finding vaccines
