CanSecWest: Security Masters Dojo Vancouver
| Next Session Dates: | March 22-23 2010 |
| Venue: |
Sheraton Wall Center Vancouver, Canada |
| Duration: |
1 or 2 Day Courses. Sessions begin at 10:00 a.m. and go to 6 p.m. |
|
Registration Maximum: |
15 Students per course session. |
Reverse Engineering
Instructor:
Halvar Flake, Zynamics
Sebastian Porst, Zynamics
Register For This Course
Description
Reverse engineering is an important skill in modern security work. While introductory classes have made "getting started" much easier, making the step to "efficient reverse engineer" is still difficult.
This class aims at helping you make that transition. Assuming that you have some background in reverse engineering, we teach techniques to improve your speed and efficiency when performing patch analysis and bug hunting.
PREREQUISITE WARNING Each class has prerequisites for software loads and a laptop is mandatory. These individual class guides will list material the students are expected have knowledge about coming in and software tools that need to be pre-installed before attending so you get the maximum benefit from the focused intermediate or advanced level course. Please pay particular attention to the prerequisites, as the material listed there will not be reviewed in the courses, and will be necessary to get the maximum benefit out of these educational programs.
The core concepts that will be taught in this class are:
- Differential debugging to isolate functionality (crypto components, parsers)
- Efficiently analysing security updates for Adobe and MS products
- Saving time by porting symbols from open-source projects
- Dealing with modern C++ code from a reverse engineering perspectivei
- Automation, Automation, Automation
The class will alternate between lectures and hands-on, real-world labs. By the end of the class, students will have not only understood the concepts, but absorbed them and be able to effectively apply them in real scenarios.
Prerequisites:
- Students should have -some- reverse engineering experience
- Knowledge of x86 assembly is assumed
- Some experience with IDA Pro, OllyDBG is assumed
- Basic Python knowledge is assumed
Prerequisite Material
- A laptop with VMWare Workstation or Player installed
- The laptop should have sufficient quantities of RAM (2GB are minimum, more recommended)
- Students should bring their own copy of IDA Pro
