Malware Analysis

Key Details

Time commitment

Total workload: 125 hours
Contact hours:

• Virtual lessons: 15 h
• Audiovisual teaching resources: 6 h.
• Mentorship: 16 h.
• Collaborative work: 7 h.
• Case studies: 17 h.

Self-study:

• Study of the basic material: 30 h.
• Reading the supplementary material: 22 h.
• Lab works: 8 h.
• Self-evaluation test: 4 h.
• Self-evaluation test: 4 h.

Assessment

• Self-evaluation test: 4 h. (10%)
• Lab Works: 10 h. (15%)
• Collaborative work: 7 h. (15%)
• Final exam: 2 h. (60%)

Subjects covered

1. Malware analysis introduction and fundamentals:

• Description: Introduction to the context of malware analysis. Understanding the structure, operation, and interaction of malware, the importance of the process for malware analysis, to provides valuable information not only for the design and development of effective countermeasures, but also for understanding the origin of an attack and the ability to assess whether an organization’s security systems can detect it and therefore analyse and take the necessary and appropriate response actions.
• Level of difficulty: low

2. Malware analysis methodologies:

• Description: This topic focuses on the study of a “Malware Analysis and Reverse Engineering” methodology using malware analysis and reengineering techniques and methods whose main objective is to acquire knowledge and gain a complete understanding of a particular malware, its operation, identification and ways to remove it.
• Level of difficulty: medium

3. Malware analysis tools:

• Description: fundamental explanation and description of the different tools used for developing the malware analysis process.
• Level of difficulty: medium

4. Anti-Malware tools:

• Description: Fundamental explanation and description of the actual anti-malware tools.
• Level of difficulty: medium

5. Case studies: Malware scenarios

• Description: Simulate malware to learn how it works under controlled conditions.
• Level of difficulty: low

6. Malware crisis management:

• Description: Methodological description of the process and procedures for the malware analysis process (preparation, action, execution, dissemination and feedback) communication for resilience business plan.
• Level of difficulty: medium

7. Malware analyst certification roadmap:

• Description: Introduction to the certification in malware analysis. (study preparation, in technical and theorical aspects).
• Level of difficulty: low

8.-12. Consolidation and real-world integration.

Learning objectives

On successful completion of this module, the learner will be able to:

1. Demonstrate knowledge of the history of malware and its evolution, including relevant regulations and policies, and define key concepts such as types of malware, malware lifecycles, and common infection methods.

2. Comprehend the malware analysis process.

3. Classify different types of malware according to defined criteria.

4. Recognise how the tools used in the malware analysis process work and interpret their results.

5. Identify the methods, tools, and programs used in the malware analysis process.

6. Plan and execute the malware analysis process.

7. Analyse the structure and functionality of malware by dissecting code, identifying malicious behaviours, and determining potential damage or security risks.

8. Prepare reports with the results of malware analysis for organisational use.
Skills

• Evaluate and analyse types of anti-malware solutions according to their performance, and recognise major malware campaigns to inform preventive measures.
• Manage the malware analysis process during critical situations, supporting the business resilience plan.
• Develop results reports after malware analysis to support managerial decision-making.