Practice-Oriented Teaching of Malware Analysis: A Course Design and Implementation Study

DOI

10.2991/978-2-38476-628-4_11How to use a DOI?

Keywords

Malware Analysis; Practice-oriented Teaching; Reverse Engineering; Control-flow Analysis; Symbolic Execution

Abstract

To address the gap between theoretical instruction and practical skills in cybersecurity education, this paper presents a practice-oriented teaching framework for a malware analysis course. The framework follows a progressive pipeline—“environment setup → basic analysis → in-depth reverse engineering → comprehensive practice (hands-on combat)”—and employs four representative malware categories: registry persistence, path hijacking, self-modifying code, and encryption/packing. The curriculum integrates IDA Pro static reverse engineering, dynamic debugging, and ANTLR-based program analysis techniques, establishing a complete technical chain from control-flow graph construction and data-flow tracing to symbolic-execution pre-analysis. The paper elaborates on the principles, critical operational steps, and technical nuances of combining static and dynamic analysis in each case study. Teaching practice demonstrates that this approach effectively enhances students’ malware analysis capabilities and adversarial thinking in cyber defense.

Copyright

© 2026 The Author(s)

Open Access

Open Access This chapter is licensed under the terms of the Creative Commons Attribution-NonCommercial 4.0 International License (http://creativecommons.org/licenses/by-nc/4.0/), which permits any noncommercial use, sharing, adaptation, distribution and reproduction in any medium or format, as long as you give appropriate credit to the original author(s) and the source, provide a link to the Creative Commons license and indicate if changes were made.

Download article (PDF)

TY  - CONF
AU  - Jing Wang
AU  - Zhi Lin
PY  - 2026
DA  - 2026/10/30
TI  - Practice-Oriented Teaching of Malware Analysis: A Course Design and Implementation Study
BT  - Proceedings of the 2026 2nd International Conference on Education Research and Training Technologies (ERTT 2026)
PB  - Atlantis Press
SP  - 106
EP  - 112
SN  - 2352-5398
UR  - https://doi.org/10.2991/978-2-38476-628-4_11
DO  - 10.2991/978-2-38476-628-4_11
ID  - Wang2026
ER  -