2026-06-08T04:18:48Zhttps://docta.ucm.es/rest/oai/request
oai:docta.ucm.es:20.500.14352/883652023-10-24T01:25:23Zcom_20.500.14352_1col_20.500.14352_8
Docta Complutense advisor García-Magariño García, Iván advisor Vázquez Poletti, José Luis author Saraiba Torres, Cristóbal 2023-10-23T16:37:56Z 2023-10-23T16:37:56Z 2023 https://hdl.handle.net/20.500.14352/88365 La ciberseguridad es uno de los campos de la informática que más rápido avanza. Los ataques de malware, y la concienciación sobre cómo defenderse de estas amenazas, es algo que concierne a todo el mundo. Es por eso necesario acercarse al funcionamiento de estos programas maliciosos y conocer desde dentro todo su comportamiento para así ser capaz de dar una solución eficaz a estos problemas. Este trabajo se centra la experimentación, basándose así en realizar una investigación sobre el mundo de la ingeniería inversa en la ciberseguridad (reversing), estudiando las técnicas relacionadas con este tema y sobre las herramientas usadas, para así obtener un conocimiento suficiente que finalice en una prueba de concepto aplicando las técnicas de reversing y análisis a un malware.Cybersecurity is one of the fastest advancing fields of computing. Malware attacks, and awareness of how to defend against these threats, is something that concerns everyone. It is therefore necessary to get closer to the behaviour of these malicious programs and to know from the inside how they behave in order to be able to provide an effective solution to these problems. This work focuses on experimentation, thus basing research on the world of reverse engineering in cybersecurity (reversing), studying the techniques related to this topic and the tools used, in order to obtain sufficient knowledge to end up in a proof of concept by applying reversing and analysis techniques to a malware. spa Attribution-NonCommercial-NoDerivatives 4.0 International Reversing y análisis de un malware bachelor thesis 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 URL https://docta.ucm.es/bitstreams/16e70609-29b8-43af-9d73-b15f5fa7b446/download File MD5 f747780adc152cde4ee8e368ece8ad19 4333379 application/pdf 2166208726 - CRISTÓBAL SARAIBA TORRES - 85041_CRISTOBAL_SARAIBA_TORRES_TFG_Reversing_y_analisis_de_un_malware_2404378_162826190.pdf URL https://docta.ucm.es/bitstreams/b2776902-540f-428b-866b-670ce63e9494/download File MD5 44567b4a9139aa6e39cff3bd76ab835a 91017 text/plain 2166208726 - CRISTÓBAL SARAIBA TORRES - 85041_CRISTOBAL_SARAIBA_TORRES_TFG_Reversing_y_analisis_de_un_malware_2404378_162826190.pdf.txt