Learn anti-virus structure and
principles with Python 3

Learn the inner workings of anti-virus using the Python language.
You will also learn how to diagnose and treat various malware through anti-virus exercises.

Contact us on +82-2-2671-3344

Training guidance

Anti-Virus Structure and Principles with Python 3
  • Training hours
  • 09:30 to 17:30 (35 hours | 5 days)
  • Training locations
  • KnK Digital Tower, 220 Yeongsin-ro, Yeongdeungpo-gu, Seoul, Korea
  • Training costs
  • Inquiry, non-reimbursement process
  • Capacity
  • 10 to 20 people
  • Remarks
  • Lecture PPT, certificate for 80% attendance

Educational purposes

Anti-virus development is a skill that only a few security experts in Korea possess. The purpose of this training is to make it easier to develop anti-virus using Python, a scripting language, rather than C/C++.

Training for

  • You want to be an information security professional

  • Interested in anti-virus development

  • Looking for a new field, new experience

Training schedule and content

Day 1

Before you start developing a vaccine
  • Malware
  • What is Malware?
  • History of Malware
  • Classification of malware
  • Malware nomenclature
  • Vaccines
  • What is a Vaccine?
  • History of domestic vaccines
  • Python (building development environments)
  • Understanding Python
  • Installing Python
  • Python Grammar
  • How vaccines work
  • Making Vaccines Super Simple
  • MD5 Hash
  • Increased malware scanning speed
  • Increase in malware patterns
  • Separation of malware pattern files
  • Exception handling in malware pattern files
  • Separation of malware remediation modules
  • Detaching the Malware Diagnostics Module

Day 2

Developing cancer/decryption tools for vaccines
  • Why encryption is necessary
  • Compiling Python
  • Python decompilers
  • Develop cancer/decryption tools
  • Encryption of the Vaccine Engine Module
  • Decryption of vaccine engine modules
  • Loading modules dynamically
  • Loading modules from files
  • Loading modules from memory
  • Python as an executable
  • How to use py2exe
  • How to use pyInstaller

Day 3

Structure of plug-in Anti-Viruses
  • Structure of foreign vaccine engines
  • Kaspersky Antivirus Engine
  • Bitdefender Antivirus Engine
  • Developing vaccine engine modules in a plugin structure
  • Designing a Vaccine Engine Module
  • Developing a Dummy Vaccine Engine Module
  • Testing the Dummy Vaccine Engine Module
  • Developing the EICAR Test Vaccine Engine Module
  • Testing the EICAR Test Vaccine Engine Module
  • Encrypting Vaccine Engine Modules
  • Loading modules dynamically
  • Loading modules from files
  • Loading modules from memory
  • Python as an executable
  • How to use py2exe
  • How to use pyInstaller

Day 4

Developing the antivirus engine kernel
  • Vaccine engine module priorities
  • Antivirus Engine Module Priority List File
  • Modifications to cryptographic tools
  • Development of the vaccine engine kernel module
  • Determining Vaccine Engine Module Priorities
  • Implementing the Vaccine Engine Kernel Class
  • Dynamically Loading and Managing Vaccine Engine Modules
  • Calling a Vaccine Engine Module
  • Developing native libraries
  • Overview of native libraries
  • Priorities for native libraries
  • Designing Native libraries
  • Developing a compressed file engine
  • ZIP File Formats
  • Working with ZIP files in Python
  • Modifying the antivirus kernel
  • ALZ File Format
  • EGG File Format
  • UPX File Format

Day 5

Developing a malware engine
  • PE Engine
  • PE File Format Analysis
  • Developing a Windows malware diagnostic and remediation engine
  • Developed Windows malware pattern generator
  • OLE Engine
  • OLE File Format Analysis
  • Developed Hangul (HWP) malware diagnosis/cure engine
  • Script engine
  • Overview of script file formats
  • Script file formats
  • Developing a script engine