Cargando…

Practical reverse engineering : x86, x64, ARM, Windows Kernel, reversing tools, and obfuscation /

Analyzing how hacks are done, so as to stop them in the future. Reverse engineering is the process of analyzing hardware or software and understanding it, without having access to the source code or design documents. Hackers are able to reverse engineer systems and exploit what they find with scary...

Descripción completa

Detalles Bibliográficos
Clasificación:Libro Electrónico
Autores principales: Dang, Bruce (Autor), Gazet, Alexandre (Autor), Bachaalany, Elias (Autor)
Otros Autores: Josse, Sébastien (Contribuidor)
Formato: Electrónico eBook
Idioma:Inglés
Publicado: Indianapolis, IN : Wiley, [2014]
Temas:
Acceso en línea:Texto completo (Requiere registro previo con correo institucional)

MARC

LEADER 00000cam a2200000 i 4500
001 OR_ocn874161575
003 OCoLC
005 20231017213018.0
006 m o d
007 cr cnu---unuuu
008 131030t20142014inua ob 001 0 eng d
040 |a E7B  |b eng  |e rda  |e pn  |c E7B  |d OCLCO  |d YDXCP  |d N$T  |d UMI  |d COO  |d DOS  |d TEFOD  |d RECBK  |d XFF  |d OCLCF  |d DEBBG  |d OCL  |d AZU  |d EBLCP  |d HF7  |d IDEBK  |d B24X7  |d DEBSZ  |d TEFOD  |d OCLCQ  |d COCUF  |d CNNOR  |d MOR  |d PIFPO  |d ZCU  |d NRC  |d LIV  |d MERUC  |d OCLCQ  |d U3W  |d OCLCA  |d REB  |d STF  |d CEF  |d NRAMU  |d DEHBZ  |d CRU  |d ICG  |d VTS  |d OCLCQ  |d INT  |d VT2  |d AU@  |d OCLCQ  |d WYU  |d G3B  |d TKN  |d OCLCQ  |d UAB  |d DKC  |d OCLCQ  |d UKAHL  |d OCLCQ  |d BRF  |d OCLCO  |d OCLCQ  |d AJB  |d OCLCQ 
015 |a GBB3B8076  |2 bnb 
016 7 |a 016589087  |2 Uk 
019 |a 870586999  |a 875668749  |a 883212452  |a 894632041  |a 961667553  |a 962727106  |a 966382529  |a 1026467353  |a 1055401793  |a 1058188358  |a 1066052922  |a 1081241737  |a 1103258211  |a 1129351315  |a 1152973126  |a 1192329708  |a 1228599636  |a 1311344970 
020 |a 9781118787250  |q (electronic bk.) 
020 |a 1118787250  |q (electronic bk.) 
020 |a 9781118787397  |q (electronic bk.) 
020 |a 1118787390  |q (electronic bk.) 
020 |z 9781118787311  |q (pbk. ;  |q alk. paper) 
020 |z 1118787315  |q (pbk. ;  |q alk. paper) 
029 1 |a AU@  |b 000052839753 
029 1 |a AU@  |b 000053042790 
029 1 |a AU@  |b 000053336903 
029 1 |a DEBBG  |b BV042032159 
029 1 |a DEBBG  |b BV043607420 
029 1 |a DEBSZ  |b 41417626X 
029 1 |a DEBSZ  |b 431623813 
029 1 |a NZ1  |b 15495099 
035 |a (OCoLC)874161575  |z (OCoLC)870586999  |z (OCoLC)875668749  |z (OCoLC)883212452  |z (OCoLC)894632041  |z (OCoLC)961667553  |z (OCoLC)962727106  |z (OCoLC)966382529  |z (OCoLC)1026467353  |z (OCoLC)1055401793  |z (OCoLC)1058188358  |z (OCoLC)1066052922  |z (OCoLC)1081241737  |z (OCoLC)1103258211  |z (OCoLC)1129351315  |z (OCoLC)1152973126  |z (OCoLC)1192329708  |z (OCoLC)1228599636  |z (OCoLC)1311344970 
037 |a CL0500000413  |b Safari Books Online 
037 |a 6665E1AF-688A-4082-B241-86935AFACBDC  |b OverDrive, Inc.  |n http://www.overdrive.com 
050 4 |a TA168.5  |b .D36 2014eb 
072 7 |a COM  |x 043050  |2 bisacsh 
072 7 |a COM  |x 060040  |2 bisacsh 
072 7 |a COM  |x 053000  |2 bisacsh 
082 0 4 |a 005.8  |2 23 
049 |a UAMI 
100 1 |a Dang, Bruce,  |e author. 
245 1 0 |a Practical reverse engineering :  |b x86, x64, ARM, Windows Kernel, reversing tools, and obfuscation /  |c Bruce Dang, Alexandre Gazet, Elias Bachaalany ; with contributions from Sébastien Josse. 
264 1 |a Indianapolis, IN :  |b Wiley,  |c [2014] 
264 4 |c ©2014 
300 |a 1 online resource (383 pages) :  |b illustrations 
336 |a text  |b txt  |2 rdacontent 
337 |a computer  |b c  |2 rdamedia 
338 |a online resource  |b cr  |2 rdacarrier 
588 0 |a Print version record. 
504 |a Includes bibliographical references (pages 337-340) and index. 
520 |a Analyzing how hacks are done, so as to stop them in the future. Reverse engineering is the process of analyzing hardware or software and understanding it, without having access to the source code or design documents. Hackers are able to reverse engineer systems and exploit what they find with scary results. Now the good guys can use the same tools to thwart these threats. Practical Reverse Engineering goes under the hood of reverse engineering for security analysts, security engineers, and system programmers, so they can learn how to use these same processes to stop hackers in their tracks. The book covers x86, x64, and ARM (the first book to cover all three); Windows kernel-mode code rootkits and drivers; virtual machine protection techniques; and much more. Best of all, it offers a systematic approach to the material, with plenty of hands-on exercises and real-world examples. Offers a systematic approach to understanding reverse engineering, with hands-on exercises and real-world examples; Covers x86, x64, and advanced RISC machine (ARM) architectures as well as deobfuscation and virtual machine protection techniques; Provides special coverage of Windows kernel-mode code (rootkits/drivers), a topic not often covered elsewhere, and explains how to analyze drivers step by step; Demystifies topics that have a steep learning curve; Includes a bonus chapter on reverse engineering tools. Practical Reverse Engineering: Using x86, x64, ARM, Windows Kernel, and Reversing Tools provides crucial, up-to-date guidance for a broad range of IT professionals.--  |c Publisher description. 
505 0 |a Cover; Title Page; Copyright; Contents; Chapter 1 x86 and x64; Register Set and Data Types; Instruction Set; Syntax; Data Movement; Exercise; Arithmetic Operations; Stack Operations and Function Invocation; Exercises; Control Flow; System Mechanism; Address Translation; Interrupts and Exceptions; Walk-Through; Exercises; x64; Register Set and Data Types; Data Movement; Canonical Address; Function Invocation; Exercises; Chapter 2 ARM; Basic Features; Data Types and Registers; System-Level Controls and Settings; Introduction to the Instruction Set; Loading and Storing Data; LDR and STR. 
505 8 |a Other Usage for LDRLDM and STM; PUSH and POP; Functions and Function Invocation; Arithmetic Operations; Branching and Conditional Execution; Thumb State; Switch-Case; Miscellaneous; Just-in-Time and Self-Modifying Code; Synchronization Primitives; System Services and Mechanisms; Instructions; Walk-Through; Next Steps; Exercises; Chapter 3 The Windows Kernel; Windows Fundamentals; Memory Layout; Processor Initialization; System Calls; Interrupt Request Level; Pool Memory; Memory Descriptor Lists; Processes and Threads; Execution Context; Kernel Synchronization Primitives; Lists. 
505 8 |a Implementation DetailsWalk-Through; Exercises; Asynchronous and Ad-Hoc Execution; System Threads; Work Items; Asynchronous Procedure Calls; Deferred Procedure Calls; Timers; Process and Thread Callbacks; Completion Routines; I/O Request Packets; Structure of a Driver; Entry Points; Driver and Device Objects; IRP Handling; A Common Mechanism for User-Kernel Communication; Miscellaneous System Mechanisms; Walk-Throughs; An x86 Rootkit; An x64 Rootkit; Next Steps; Exercises; Building Confidence and Solidifying Your Knowledge; Investigating and Extending Your Knowledge. 
505 8 |a Analysis of Real-Life DriversChapter 4 Debugging and Automation; The Debugging Tools and Basic Commands; Setting the Symbol Path; Debugger Windows; Evaluating Expressions; Process Control and Debut Events; Registers, Memory, and Symbols; Breakpoints; Inspecting Processes and Modules; Miscellaneous Commands; Scripting with the Debugging Tools; Pseudo-Registers; Aliases; Language; Script Files; Using Scripts Like Functions; Example Debug Scripts; Using the SDK; Concepts; Writing Debugging Tools Extensions; Useful Extensions, Tools, and Resources; Chapter 5 Obfuscation. 
505 8 |a A Survey of Obfuscation TechniquesThe Nature of Obfuscation: A Motivating Example; Data-Based Obfuscations; Control-Based Obfuscation; Simultaneous Control-Flow and Data-Flow Obfuscation; Achieving Security by Obscurity; A Survey of Deobfuscation Techniques; The Nature of Deobfuscation: Transformation Inversion; Deobfuscation Tools; Practical Deobfuscation; Case Study; First Impressions; Analyzing Handlers Semantics; Symbolic Execution; Solving the Challenge; Final Thoughts; Exercises; Appendix Sample Names and Corresponding SHA1 Hashes; Index. 
590 |a O'Reilly  |b O'Reilly Online Learning: Academic/Public Library Edition 
650 0 |a Reverse engineering. 
650 0 |a Computer security. 
650 0 |a Disassemblers (Computer programs) 
650 2 |a Computer Security 
650 6 |a Rétro-ingénierie. 
650 6 |a Sécurité informatique. 
650 6 |a Désassembleurs (Logiciels) 
650 7 |a COMPUTERS  |x Networking  |x Security.  |2 bisacsh 
650 7 |a COMPUTERS  |x Internet  |x Security.  |2 bisacsh 
650 7 |a COMPUTERS  |x Security  |x General.  |2 bisacsh 
650 7 |a Computer security.  |2 fast  |0 (OCoLC)fst00872484 
650 7 |a Disassemblers (Computer programs)  |2 fast  |0 (OCoLC)fst01745964 
650 7 |a Reverse engineering.  |2 fast  |0 (OCoLC)fst01096543 
700 1 |a Gazet, Alexandre,  |e author. 
700 1 |a Bachaalany, Elias,  |e author. 
700 1 |a Josse, Sébastien,  |e contributor. 
776 0 8 |i Print version:  |a Dang, Bruce.  |t Practical reverse engineering.  |d Indianapolis, Indiana : Wiley, [2014]  |z 9781118787311  |w (OCoLC)858361554 
856 4 0 |u https://learning.oreilly.com/library/view/~/9781118787397/?ar  |z Texto completo (Requiere registro previo con correo institucional) 
938 |a Askews and Holts Library Services  |b ASKH  |n AH26202858 
938 |a Askews and Holts Library Services  |b ASKH  |n AH26183556 
938 |a Books 24x7  |b B247  |n bks00062680 
938 |a EBL - Ebook Library  |b EBLB  |n EBL1629173 
938 |a ebrary  |b EBRY  |n ebr10837612 
938 |a EBSCOhost  |b EBSC  |n 698067 
938 |a ProQuest MyiLibrary Digital eBook Collection  |b IDEB  |n cis28026675 
938 |a Recorded Books, LLC  |b RECE  |n rbeEB00229871 
938 |a YBP Library Services  |b YANK  |n 11636534 
994 |a 92  |b IZTAP