{"id":7,"date":"2013-06-17T09:42:04","date_gmt":"2013-06-17T09:42:04","guid":{"rendered":"http:\/\/www.3lectrik.com\/normanshark\/?page_id=7"},"modified":"2013-10-30T15:20:37","modified_gmt":"2013-10-30T22:20:37","slug":"automated-malware-analysis","status":"publish","type":"page","link":"https:\/\/www.3lectrik.com\/normanshark\/threat-protection\/automated-malware-analysis\/","title":{"rendered":"Automated Malware Analysis"},"content":{"rendered":"

Malware Analysis and the Cyber threat landscape<\/h3>\n

Enterprise IT organizations face a cyber threat landscape that is constantly changing, and rarely for the better. The complexity of attacks on IT systems grows exponentially as the number of systems and interconnections between them increases.\u00a0 Additionally, the types of attacks from malicious software (malware) are changing, ranging from the more \u2018traditional\u2019 (viruses\/worms) to newer targeted attacks such as spear-phishing and advanced persistent threats (APT). With no technology immune to cyberattack, and with many ways to break into a network, enterprise IT organizations face an uphill battle in attempting to keep their systems and data safe from advanced threats and targeted attacks<\/p>\n

Malware analysis has been part of this attempt to keep IT entities safe for more than a decade.\u00a0 An organization can reverse engineer any sample(s) they obtain to get an idea of what the attacker is trying to accomplish, and by what methods.\u00a0 Traditionally this has been the purview of the highly technical, requiring arcane computer knowledge and high levels of patience and exactitude.\u00a0 Such difficulties may not be insurmountable with the proper people and equipment, and the benefits to the organization are numerous: indication of what vulnerabilities were exploited in the attack, an idea of what a particular attacker was attempting to do (theft, disruption, etc.), and a complete blueprint of the cyber-weapon(s) used in the attack.\u00a0 By examining these indicators of compromise (IoC), the enterprise IT organization can gird their defenses against this attack and attacks of a similar nature.<\/p>\n

Malware analysis – a specialized skillset<\/h3>\n

Analyzing and\/or reverse engineering malware requires a highly specific skill-set, and while the number of people with malware analysis skills is increasing as the field matures, that increase does not currently keep pace with the ever-growing number and complexity of cyberattacks. And the volume of attacks is expected to continue their rapid growth.\u00a0 Without the right type and number of staff, enterprises face the risk of being unable to address the issue at its most basic level, and certainly not as it advances.\u00a0 This risk is especially onerous, as being unable to investigate incidents or respond properly to attacks leaves the organization open to a host of issues.\u00a0 Additionally, when it is discovered that a particular firm is vulnerable, this information may be shared publicly, thereby compounding the initial problem.<\/p>\n

Malware analysis provides the critical information you need to effectively respond to malicious software threats that elude traditional defenses.<\/p>\n