Week 9: Malware Analysis

Reverse engineering as an investigative process, from static and dynamic analysis to reconstructing intent

5 October 2027

Open the slides

Having built and distributed malware for eight weeks, the course turns to taking it apart. This lecture covers static and dynamic analysis, reverse engineering as an investigative process, and reconstructing what a piece of malware was intended to do from the indicators it leaves behind.

Outline#

• static vs dynamic analysis
• reverse engineering as an investigative process
• indicators of compromise
• reconstructing what malware was intended to do