SiliVaccine - North Korea's Weapon of Mass Detection

Explore the intricacies of SiliVaccine, North Korea's national anti-virus solution, in this 53-minute conference talk. Delve into the process of obtaining and reverse-engineering this rare software, uncovering surprising discoveries about its program architecture, file scanning engine, system-level drivers, and user mode utilities. Learn about the challenges faced during the investigation and gain insights into the secretive world of DPRK state-sponsored software development. Discover the sheer effort invested in creating this product and the shady practices underlying its creation. Suitable for both technical and non-technical audiences, this entertaining presentation breaks down complex reverse engineering concepts into easily understandable elements, offering a unique glimpse into the malware landscape of North Korea's closed intranet.