Malicious Cryptography: Exposing Cryptovirology

by Tony Bradley • July 30, 2009 • J-M

Rating

The Bottom Line

Most people are familiar with malware- viruses, worms, Trojans, etc.- and most people are familiar, at least with the concept, of cryptography. However there are far fewer people that truly understand either of these technologies, and even fewer still who understand how the two can be combined to create the next generation of malicious code. Good reading, but a certain level of understanding of malware and cryptography is needed in order to follow the information in this book.

Pros

Cutting edge look at new threats on the malware horizon
Informative without being boring
Appendices provide basics of viruses and PKI

Cons

Solid understanding of cryptography and malware needed

Description

Opening chapter provides engaging fictional look at the potential impact of malicious cryptography
Basics of viruses and PKI are provided in appendices, but this book is not for beginners
Cutting edge information on how cryptography might impact malware development

Review:

Almost everyone (or should that be literally everyone) who has touched a computer keyboard is familiar with malware in some way. Not a day goes by it seems without news of the latest Netsky or Bagle variant. Many people remember the impact Codered, Nimda, SQL Slammer, MyDoom and other malware threats have had on them or the Internet as a whole over the past few years.A much smaller subset of people is familiar with cryptography. Some users may be aware that encryption is an option or they may have heard that they should encrypt their data or protect their email communications with encryption, but they don’t “understand” cryptography. Those people probably shouldn’t bother trying to read this book.

Those who do understand cryptography- who know what MD5, Blowfish, RSA or 3DES mean and how they work- should probably read this book. Being on an intermediate level in cryptography myself I found some of the concepts and details required me to do some extra digging and research to understand, but I found the book to be informative and intriguing.

The book seems to waiver in search of an audience- at times covering the information at a higher level that many network and security administrators can grasp and at other times delving into detail that only true cryptographers will follow- but the authors combine information about malware and cryptography in a way that experts from each can comprehend.

Overall, this is a good book that I recommend- but not for beginners.

Malicious Cryptography: Exposing Cryptovirology