Malware : testing malware scenarios on your network

Presented at DerbyCon 3.0 All in the Family (2013), Sept. 27, 2013, 1 p.m. (50 minutes)

People get Penetration tests and vulnerability assessments to find if they have vulnerabilities that would allow an attacker to access their network but often attackers are getting in ways that penetration testers are unable to test for. The purpose of this talk is to try to introduce and encourage a different kind of security test on a network, malware and backdoors. We plan to showing a demo on how to perform this type of test, give advice from our experiences reversing malware and demo our malware library we have created that could be used to perform these type of tests.

Presenters:

• Juan Cortes (@kongo_86)
  Juan (@kongo_86) is a security researcher at Tenable Network Security where he his main job is to produce plugins for Tenable’s Passive Vulnerability Scanner. Outside of work he loves to Reverse Engineer malware and studying its techniques, as well as practice the detection via memory forensics. He expresses himself as “student”, always learning and is thankful for the community that he is par of.
• Tony Huffman (@myne_us)
  Tony Huffman (@myne_us) is a Sr. Reverse Engineer at Tenable Network Security where he spends most his time working on the research for the Nessus product. He has a primary focus in the malware and exploitation section of security where he investigates some of the latest threats and techniques and writing and maintaining a malware code library for fun. When he not working on computers he enjoys being a dad and reading about physics.

Similar Presentations:

• Black Hat Europe 2016 / 50 Thousand Needles in 5 Million Haystacks: Understanding Old Malware Tricks to Find New Malware Families
• ekoparty 14 (2018) / To Execute or Not to Execute. How to Build a Malware Execution Lab
• DerbyCon 3.0 All in the Family (2013) / The Malware Management Framework, a process you can use to find advanced malware. We found WinNTI with it!