Malware Analysis
Get the full GTU study material, English & Gujarati textbook PDFs, syllabus curriculum, and solved previous year question papers.
English Book & Chapters
English Book Coming Soon
We are working hard to add this material. Stay tuned for updates!
Follow on Instagram for UpdatesGTU Previous Year Papers
Papers Coming Soon
We are working hard to add this material. Stay tuned for updates!
Follow on Instagram for UpdatesMalware Analysis Syllabus — Unit-wise Content
The official GTU curriculum for Malware Analysis (subject code 3715605) as prescribed for CE(A · Semester 1 divides the course into 8 units, covering 63 listed topics. The unit-wise breakdown below is read from the GTU syllabus document for this subject code, so you can check what the course actually covers before deciding which papers to attempt.
Download the official syllabus PDF (3715605)Unit 1 INTRODUCTION
- Introduction to Mal-ware
- OS security concepts
- Mal- ware threats
- evolution of Mal-ware
- Mal-ware types- viruses
- root- kits
- logic bombs
- Mal-ware analysis
- static Mal-ware analysis
- dynamic Mal-ware analysis
Unit 2 Virtual Machines and Emulators
- Benefits Of Virtualization
- Oracle Virtual Box, VMware Player
- Virtual PC, Open source Alternatives:Bochs
- QEMU, KVM
Unit 3 Vulnerability Scanning
- Overview of Vulnerability Scanning
- Open Port Service Identification
- Banner/Version Check
- Traffic Probe
- Vulnerability Probe
- Vulnerability Examples
Unit 4 STATIC ANALYSIS
- X86 Architecture- Main Memory
- Opcodes and Endian-ness
- Simple Instructions
- The Stack
- Rep Instructions
- C Main Method and Offsets
- Anti-virus Scanning
- Fingerprint for Mal-ware
- Portable Executable File Format
- The PE File Headers and Sections
- The Structure of a Virtual Machine
- Reverse-Engineering- x86 Architecture
- recognizing c code constructs in assembly
- Analyzing Windows programs
- Anti-static analysis techniques- obfuscation
Unit 5 DYNAMIC ANALYSIS
- live Mal-ware analysis
- dead Mal-ware analysis
- analyzing traces of Mal-ware- System-calls
- network activities
- Anti-dynamic analysis techniques- anti-vm
- runtime-evasion techniques
- Mal-ware Sandbox
- Monitoring with Process Monitor
- Packet Sniffing with Wire-shark
- Kernel vs
- User-Mode Debugging
- Exception Handling
Unit 6 Mal-ware Functionality
- Credential Stealer's
- Subject Code: 3715605 Persistence Mechanisms
- Privilege Escalation
- Covert Mal-ware launching- Launchers
- Process Injection
- Process Replacement
- Hook Injection
- APC injection
Unit 7 Mal-ware Detection Techniques
- Signature-based techniques: Mal-ware signatures
- packed Mal-ware signature
- metamorphic and polymorphic Mal-ware signature Non-signature based techniques: similarity-based techniques
- machine-learning methods
- invariant inferences
Unit 8 Android Mal-ware
- Mal-ware Characterization
- Case Studies – Plankton
- Smartphone (Apps) Security 5
Study on Android App:
