Wow! eBook
Antivirus Bypass Techniques: Learn practical techniques and tactics to combat, bypass, and evade antivirus software
Author(s): Nir Yehoshua (Author), Uriel Kosayev (Author)
- Publisher: Packt Publishing
- Publication Date: 16 July 2021
- Language: English
- Print length: 242 pages
- ISBN-10: 1801079749
- ISBN-13: 9781801079747
Book Description
Develop more secure and effective antivirus solutions by leveraging antivirus bypass techniques
Key Features
- Gain a clear understanding of the security landscape and research approaches to bypass antivirus software
- Become well-versed with practical techniques to bypass antivirus solutions
- Discover best practices to develop robust antivirus solutions
Book Description
Antivirus software is built to detect, prevent, and remove malware from systems, but this does not guarantee the security of your antivirus solution as certain changes can trick the antivirus and pose a risk for users. This book will help you to gain a basic understanding of antivirus software and take you through a series of antivirus bypass techniques that will enable you to bypass antivirus solutions.
The book starts by introducing you to the cybersecurity landscape, focusing on cyber threats, malware, and more. You will learn how to collect leads to research antivirus and explore the two common bypass approaches used by the authors. Once you’ve covered the essentials of antivirus research and bypassing, you’ll get hands-on with bypassing antivirus software using obfuscation, encryption, packing, PowerShell, and more. Toward the end, the book covers security improvement recommendations, useful for both antivirus vendors as well as for developers to help strengthen the security and malware detection capabilities of antivirus software.
By the end of this security book, you’ll have a better understanding of antivirus software and be able to confidently bypass antivirus software.
What you will learn
- Explore the security landscape and get to grips with the fundamentals of antivirus software
- Discover how to gather AV bypass research leads using malware analysis tools
- Understand the two commonly used antivirus bypass approaches
- Find out how to bypass static and dynamic antivirus engines
- Understand and implement bypass techniques in real-world scenarios
- Leverage best practices and recommendations for implementing antivirus solutions
Who this book is for
This book is for security researchers, malware analysts, reverse engineers, pentesters, antivirus vendors looking to strengthen their detection capabilities, antivirus users and companies that want to test and evaluate their antivirus software, organizations that want to test and evaluate antivirus software before purchase or acquisition, and tech-savvy individuals who want to learn new topics.
Table of Contents
- Introduction to the Security Landscape
- Before Research Begins
- Antivirus Research Approaches
- Bypassing the Dynamic Engine
- Bypassing the Static Engine
- Other Antivirus Bypass Techniques
- Antivirus Bypass Techniques in Red Team Operations
- Best Practices and Recommendations
Editorial Reviews
Review
“Any cyber intelligence OSINT hunter is happy to find a tool with zero detections of antivirus software and vendors. I found ‘Antivirus Bypass Techniques’ to be an important and essential book for learning more about these bypass techniques. Whether you are blue, red, or purple, you can learn crucial methods and critical knowledge about the world of bypassing antivirus software. A very comprehensive book, well-written, easy to understand, and with the PoCs featured in the book, you can become a better security professional in the future. Recommended!”
—
Ohad Zaidenberg, Lead Cyber Intelligence Researcher, Anheuser-Busch InBev
“Antivirus Bypass Techniques is a great book for those who are pursuing a career in cybersecurity, be it blue or red teaming.
It contains not only the necessary fundamentals and examples of the bypass techniques themselves but also definitions and technical explanations of how to use and acquire those techniques. Advanced-level experts will enjoy this book as well, hence I recommend it warmly. I hope to see Nir Yehoshua & Uriel Kosayev writing more books on the same topic of bypassing security products and how to prevent it.”
—
Ido Naor – CEO, Security Joes
