Register now for SANS Cyber Defense Initiative 2016 and save $400.

Seattle 2013

Seattle, WA | Mon, Oct 7 - Mon, Oct 14, 2013

Sick Anti-analysis Mechanisms in the Wild

  • Alissa Torres
  • Wednesday, October 9th, 7:15pm - 8:15pm

For those in the trenches of enterprise defense, it appears malware authors are deriving sick pleasure of late in mechanizing their end products with sophisticated self-defense and evasion capabilities. From "environmentally-aware" binaries to malware that defeats image acquisition, attackers are becoming increasingly more adept at evading analysis. During this presentation, several of these anti-analysis techniques will be explored, preparing attendees for what they are likely to encounter with increasing frequency - malware that fights back.

Bonus Sessions

The following bonus sessions are open to all paid attendees at no additional cost. There are many different types of events that fall into these categories:

  • SANS@Night: Evening presentations given after day courses have ended. This category includes Keynotes.
  • Special Events: SANS-hosted events and other non-technical recreational offerings. This category includes, but is not limited to, Receptions and Information Tables.
  • Vendor: Events hosted by external vendor exhibitors.
Monday, October 7
Session Speaker Time Type
General Session - Welcome to SANS Dr. Eric Cole Monday, October 7th, 8:15am - 8:45am Special Events
APT: It is Time to Act Dr. Eric Cole Monday, October 7th, 7:15pm - 9:15pm Keynote
Tuesday, October 8
Session Speaker Time Type
Vendor Showcase Tuesday, October 8th, 10:30am - 10:50am Vendor Event
Vendor Showcase Tuesday, October 8th, 12:30pm - 1:15pm Vendor Event
Vendor Showcase Tuesday, October 8th, 3:00pm - 3:20pm Vendor Event
Why Our Defenses Are Failing Us. One Click Is All It Takes... Bryce Galbraith Tuesday, October 8th, 7:15pm - 8:15pm SANS@Night
"So What?" The Most Important Question in Information Security Kevin Fiscus Tuesday, October 8th, 8:15pm - 9:15pm SANS@Night
Wednesday, October 9
Session Speaker Time Type
Sick Anti-analysis Mechanisms in the Wild Alissa Torres Wednesday, October 9th, 7:15pm - 8:15pm SANS@Night
Thursday, October 10
Session Speaker Time Type
GIAC Program Overview Stephen Northcutt Thursday, October 10th, 7:15pm - 7:45pm Special Events
SANS Technology Institute Open House Stephen Northcutt Thursday, October 10th, 7:45pm - 8:15pm Special Events