Bruce Schneier personal blog

The CIA's “Development Tradecraft Do's and Dont's”

Useful best practices for malware writers, courtesy of the CIA. Seems like a lot of good advice. General: DO obfuscate or encrypt all strings and configuration data that directly relate to tool functionality. Consideration should be made to also only de-obfuscating strings in-memory at the moment the data is needed…
Points
219
HN comments
44
Submissions
1
Cited by
0 commenters

Security & PrivacySociety, Policy & Culture2017

On Hacker News

SubmittedTitle on HNPointsComments
Mar 13, 2017The CIA's “Development Tradecraft Do's and Dont's” by loop2221944

More from Bruce Schneier

All 164 posts →

Related posts from the same era