Reverse Engineering

Training + Workshop: Reverse Engineering

Target audience: Security Officers, Auditors, System Administrators

Duration: 2 Days

Location: Heidelberg, Germany

Requirements: Basic knowledge of Assembler and C (expert knowledge not required)

Description:

This course is adressed to IT Professionals with basic experience in development domain. Participants will be introduced to closed source software for Windows based on the ERNW GmbH methodology. Required tools will be presented and illustrated with practical examples and exercises. The goal is to conduct an efficient and customer-oriented Reverse Engineering, that means in the shortest time and with the less Assembler know how. Moreover you will learn more about conditions and limits of success, with concrete cases for less effective methods.

Content:

· Required Know How for general Reverse Engineering
· Tools presentation
· Binaries configuration??? (PE Header) for Windows
· The basics of disassembling
· Troubleshooting of disassembling
· The basics of decompiling
· Results assessment and reliability
· Introduction to debugging and API monitoring
· Benefits of API mMonitoring
· Debugger adaptation to the RE project
· Runtime analysís vs. statical analysis
· The basics of code coverage
· Structured approach to Reverse Engineering
· Advantages and disadvantages of the method
· Conditons and limits of success, with concrete cases for less effective methods
· Discussion about possible solutions in this case
· Advisable addons
· SDKs for disassembler and decompiler
· Recommanded readings and Web links

Exercises

Tools introduction will be illustrated and completed with practical exercises. Required software will be provided. The exercises have been specialliy compiled and selected in order to reach the learning target and are part of the courseware.

Maximum number of participants: 8

Dates:
29. - 30.07.2010
02. - 03.11.2010

TROOPERS11 - March 2011
TROOPERS11 takes place from 14-18. March 2011 at Heidelberg. Mark your calendars now and sign up for the official TROOPERS newsletter to stay up-to-date. [More]
Security Testing
Testing IT security is one of the core competences of ERNW. Many of our customers get their IT infrastructure and (Web) applications checked on a regular basis. This may either be done on a very technical level in terms of penetration testing or in a more formal way in terms of general security audits, during which we verify the IT Security Compliance of your company compared to best practices according to ISO17799/ISO27001 ... [More]
Research & Technology-Evaluation
Research is the foundation of our Know-How leadership. The objections of this work is to unveil security flaws and vulnerabilities in protocols, technologies and products. Some findings derive from design-flaws, some from poor implementation on a technical level.... [More]