VB2016 paper: Debugging and monitoring malware network activities with Haka

Posted by   Martijn Grooten on   Apr 24, 2017

Anyone who has ever analysed malware through its network communications will knows that this often involves ad-hoc scripts in languages like Python or Perl to decode the traffic. After all, for somewhat understandable reasons, there is no standard C&C protocol for malware.

If you regularly find yourself in this situation, you may want to have a look at Haka, an open-source language for monitoring, debugging and controlling malicious network traffic. At VB2016 in Denver, Stormshield researchers Benoît Ancel and Mehdi Talbi, who wrote Haka, presented the paper 'Debugging and Monitoring Malware Network Activities with Haka', in which they introduced Haka and explained how it can be used.

Ancel-Talbi1.jpg

We have now published the paper in both HTML and PDF format. We have also uploaded the video recording of their presentation to our YouTube channel.

For 26 years, the Virus Bulletin Conference has been the place where security researchers share their tools, tricks and ideas to further the fight against online malicious activity. VB2017, which will take place in Madrid, 4-6 October this year, will be no exception – check out the programme and make sure you grab your ticket before 30 June for the early bird discount!

twitter.png
fb.png
linkedin.png
googleplus.png
reddit.png

 

Latest posts:

VB2018 paper: The dark side of WebAssembly

Today, we publish the VB2018 paper by Symantec researchers Aishwarya Lonkar and Siddhesh Chandrayan on the security risks that come with WebAssembly.

The Virus Bulletin conference returns home: VB2019 to take place in London

In 2019, the Virus Bulletin conference is set to return home, with VB2019 taking place in London, UK.

Guest blog: The case for increasing transparency in cybersecurity

In a guest blog post, Kaspersky Lab's Anton Shingarev considers the case for increasing transparency in cybersecurity.

VB2018 preview: Workshops

Workshops make their VB Conference debut during VB2018, giving delegates the opportunity to learn the basics of kernel-level malware analysis, Android reverse-engineering and artificial intelligence.

New article: Through the looking glass: webcam interception and protection in kernel mode

Today we publish a short article by Ronen Slavin and Michael Maltsev, researchers at Reason Software Company, who dive into the video capturing internals on Windows, and explain how this can be used by a malicious actor to steal images recorded by a…

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.