Project Details

Understanding Malware through Security Products Research (Project)

Duration: 2-4 Months, > 4 Months

Internship Type: Undergraduate

Project Overview/Background

• The project aims to understand malware through the lens of cybersecurity products. Modern cybersecurity products have evolved to incorporate novel detection capabilities and anti-tampering features to stay relevant in today's cybersecurity landscape. Understanding these capabilities and features will allow malware analysts to gain insights into unique malware heuristics and anti-detection techniques used by modern malware.

• The project requires the intern to research cybersecurity products to understand the products' novel detection capabilities as well as potential vulnerabilities in the products that could be exploited by malware authors. The research findings could then be developed to supplement malware analysis and the identification of malware authors' use of anti-detection techniques.

Scope & Deliverables

• Research on cybersecurity products' detection capabilities and vulnerabilities.

• Develop a Proof-Of-Concept (POC) to extract detection heuristics and test vulnerability.

• Develop an automated tool based on the POC that aids malware analysts in identifying malware heuristics and anti-detection behaviour.

Prerequisites/Skills Required

• Proficient in C/C++ and PowerShell for tooling and automation
• Proficient in x86/x64 Assembly for Reverse Engineering and file structure
• Knowledge of Reverse Engineering, Vulnerability Research, and Portable Executable (PE) file structure

Application