COMP47380 Advanced Malware Analysis

Academic Year 2023/2024

This course follows on from the “Malware Investigation" module to teach students the skills required for more in-depth investigations of modern malware, and the tools used to analyze, defend and recover from malware attacks. Particular emphasis will be put on more advanced topics like Reverse Engineering, and Debugging – as well as low level descriptions of the Windows OS and file formats used by malware. These approaches are key to move from the knowledge of what a malware is doing to the system (from blackboxing), to a deeper level of understanding of the purpose of the code itself.

Show/hide contentOpenClose All

Curricular information is subject to change

Learning Outcomes:

On successful completion of this module the learner will be able to:1. Assess the Windows Operating System as an attack platform for malicious code2. Analyse malware through reverse engineering and debugging3. Analyse some of the most common non-Windows executable malware, such as PDF or Android.

Student Effort Hours: 
Student Effort Type Hours


Small Group




Autonomous Student Learning




Approaches to Teaching and Learning:
active/task-based learning; lectures; critical writing; reflective learning; lab work; problem-based learning; case-based learning; 
Requirements, Exclusions and Recommendations

Not applicable to this module.

Module Requisites and Incompatibles
Not applicable to this module.
Assessment Strategy  
Description Timing Open Book Exam Component Scale Must Pass Component % of Final Grade
Examination: 2h end of trimester examination 2 hour End of Trimester Exam No Graded No


Continuous Assessment: Continuous Assessment Varies over the Trimester n/a Graded No


Carry forward of passed components
Resit In Terminal Exam
Summer Yes - 2 Hour
Please see Student Jargon Buster for more information about remediation types and timing. 
Feedback Strategy/Strategies

• Feedback individually to students, post-assessment

How will my Feedback be Delivered?

Not yet recorded.

Timetabling information is displayed only for guidance purposes, relates to the current Academic Year only and is subject to change.

There are no rows to display