Automated Malware Analysis: Summary of recent Anti-Sandbox Tricks
Regardless of the technology being used maintaining an efficient sandbox requires to continuously monitor new malware samples in order to effectively cope with new evasion techniques. Today we want to share some of the techniques that we have spotted during the last couple of months. We mentioned some of these already briefly on our Twitter feed.
Automated Malware Analysis - Cuckoo Sandbox
A number of new tools, forks, services and products emulating our efforts have been appearing casting some shadows and doubts on the future of our project. Fear not, we are as committed as ever to produce one of the best free software resources to the malware research community. We're here to stay, and here's the proof of that. Cuckoo Sandbox 1.2 is now available for download! Visit the Download p
Malwr - Coming back soon!
Malwr is coming back soon! Stay tuned for our re-launch and follow updates by signing up to our newsletter:
List of Sandboxes for Malware Analysis! — PenTestIT
List of Sandboxes for Malware Analysis!PenTestIT Your source for Information Security Related information! We had done a similar post - way back in 2009 – titled List of Online Malware Scanners. Cut to the end of 2011, we now bring you a list of free sandboxes for malware analysis. Most of them are free and open source products. However, we also have included a few commercial versions and those th
Adobe Reader Xへのゼロデイ攻撃は「ゼロ」、サンドボックスが奏効
「Adobe Reader Xを狙うゼロデイ攻撃は、いまだに出現していない。保護モードのおかげだ」。米アドビシステムズで同社製品のセキュリティを統括するブラッド・アーキン氏は2011年9月15日、Adobe ReaderやAcrobatのセキュリティについて解説した。 2010年11月にリリースされたWindows版Adobe Reader Xの特徴は、「保護モード」と呼ばれる機能を実装し、セキュリティを高めたこと。 一般的に「サンドボックス」と呼ばれるこの機能では、特定のアプリケーション（ここではAdobe Reader）を「保護された処理環境（サンドボックス化された処理環境）」で実行し、ハードディスクへの書き込みなどをできないようにする。これにより、脆弱性を悪用されてAdobe Readerを乗っ取られた場合でも、ウイルス感染などを防げる。 保護モードは、ゼロデイ攻撃（未対策の脆弱性を
Apple Sandbox Guide v0.2
Apple's Sandbox Guide v0.2 © 2011, fG! - reverser@put.as © 2011, fG! 2 Table of Contents 1 – Introduction ..................................................................................................... 3 2 – What are we talking about? .............................................................................. 3 3 – How can it be used or implemented? .......................................
DroidBox: alpha release | The Honeynet Project
The Android application sandbox is now ready for an alpha release. Details on how to get DroidBox running are available at the project webpage. At the moment, the following actions are logged during runtime: File read and write operations Cryptography API activity Opened network connections Outgoing network traffic Information leaks through the following sinks: network, file, sms Attempts to send
Malware Sandbox Services and Software
Whether you are performing digital forensics, or just have an interest in malware, a sandbox environment is an essential part of your analysis program. Sandboxing services can save time and provide a quick and easy glimpse into a suspicious files behavior. I received an email this morning from Jose' Nazario of Arbor Networks where he provided a link to a list made by Buster (author of Buster Sand
リリース、障害情報などのサービスのお知らせ
最新の人気エントリーの配信
j次のブックマーク
k前のブックマーク
lあとで読む
eコメント一覧を開く
oページを開く
GitHub - conix-security/zer0m0n: zer0m0n driver for cuckoo sandbox
Mobile-Sandbox & ADEL: Automated Malware Analyses / Mobile Phone Forensics
http://blog.cuckoobox.org/2012/05/29/cuckoo-in-flame/
heise online – IT news, guides and background information | heise online
Cuckoo Sandbox 0.3.2 is out! « Cuckoo Sandbox
https://www.mlsec.org/malheur/
Update 20/09/2011 - Malwr Forums
[PDF] The Apple Sandbox
PC
Google Code Archive - Long-term storage for Google Code Project Hosting.
https://zerowine.sourceforge.net/
vulnerabilitydatabase.com