- http://computer-forensics.sans.org/blog/2010/11/12/get-started-with-malware-analysis
- http://zeltser.com/malware-analysis-toolkit/
- http://zeltser.com/vmware-malware-analysis/
- http://computer-forensics.sans.org/blog/2010/10/11/3-phases-malware-analysis-behavioral-code-memory-forensics/
- BotMiner: Clustering Analysis of Network Traffic for Protocol- and Structure-Independent Botnet Detection https://www.usenix.org/legacy/event/sec08/tech/full_papers/gu/gu.pdf
- Mining the Network Behavior of Bots http://isg.rhul.ac.uk/sullivan/pubs/tr/2009-12.pdf
- Behavioral Clustering of HTTP-Based Malware and Signature Generation Using Malicious Network Traces https://www.usenix.org/legacy/event/nsdi10/tech/full_papers/perdisci.pdf
- From Throw-Away Traffic to Bots: Detecting the Rise of DGA-Based Malware https://www.usenix.org/system/files/conference/usenixsecurity12/sec12-final127.pdf
- Obfuscation of executable code to improve resistance to static disassembly http://www.cs.arizona.edu/~debray/Pub
Here are some things that I would like to accomplish in 2014. This list might be too long (as I keep adding to it) and might need to get sorted into minimum goals and stretch goals. Something else I might want to consider is how can I add a system to this, so that rather than setting a specific goal, I have a system that helps me achieve things I want.
- Achieve 600 hours of instruction in Mandarin (380 hours on top of the 220 I have now).
- Self study for one hour most days
- Engage in at least one face-to-face conversation either in person or on the internet every week
- The extra hours from conversation should make up for any missed days of self-study.
- Read and complete the examples in The Art of R Programming and Machine Learning for Hackers.
- spend at least 40 hours studying x86 assembly language.
| { | |
| "actor_id": "41D3AF17-147D-4DCC-ABE6-684174325D66", | |
| "country": [ | |
| { | |
| "country": "CN", | |
| "source": [ | |
| 1, | |
| 2 | |
| ] | |
| }, |
title: 'Making shit work with markdown to pandoc to pdflatex to biber and back' author: 'Kevin Thompson' shorttitle: 'Making shit work' abstract: | don't forget to indent these paragraphs
if you don't it seem to get pissed about long sentences. ...
| import json | |
| import os | |
| from collections import defaultdict | |
| from random import sample | |
| population = defaultdict(list) | |
| sample_size = 2 | |
| final_sample = defaultdict(list) | |
| # i = getIncident('blahblahblah.json') |
At any given time I have several research projects going on, but none of them give me greater pleasure than the cutting-edge research I've done in the field of Wife Trolling, the subtle art of irritating your significant other as way to express your love. Here at the Southern Minnesota Research Center I spend countless hours experimenting with new ways to troll my research subject (A.K.A my wife). Recently I've made a breakthrough discovery that I need to share in blog format since Wife Trolling doesn't have a journal (yet).
This new effective technique is based on several assumptions which may not always hold true for any given wife, but are generalizable across the population of North American wives.
- Women love Alanis Morissette
- Alanis Morissette has an irritating voice
- Wives like to remind their husbands of various things they need to do or have forgotten to do. The street term for this is 'nagging' although I prefer the technical term 'feedback.'
This mor
| anus = reader(open('bullshit_file.csv','rU')) | |
| fieldnames = [] | |
| # Read the first row of the csv file and put all the values into a list. Duplicates will not be overwritten. | |
| for headername in anus.next(): | |
| if headername not in fieldnames: | |
| fieldnames.append(headername) | |
| else: | |
| fieldnames.append(headername + " Other") | |
| from keyczar import keyczar | |
| s = 'secret string' | |
| location = '/tmp/kz' | |
| crypter = keyczar.Crypter.Read(location) | |
| s_encrypted = crypter.Encrypt(s) | |
| s_decrypted = crypter.Decrypt(s_encrypted) | |
| print s | |
| print s_encrypted | |
| print s_decrypted |
| import json | |
| import uuid | |
| import copy | |
| import csv | |
| from datetime import datetime | |
| # putIncident(i, 'blackfist') | |
| def putIncident(i, analyst="blackfist"): | |
| i['plus']['analyst'] = analyst | |
| i['plus']['created'] = datetime.utcnow().strftime('%Y-%m-%dT%H:%M:%SZ') |
| import json | |
| import os | |
| from datetime import datetime | |
| import uuid | |
| # i = getIncident('blahblahblah.json') | |
| def getIncident(inString): | |
| return json.loads(open(inString).read()) | |
| # updateIncident(i, 'blahblahblah.json', True) |