// Comparison

Les virus informatiques vs Practical Malware Analysis: Which Should You Read?

Two cybersecurity books on Malware, compared honestly: who each is for, what each does best, and which to read first.

Advanced

4/52009

Théorie, pratique et applications

Éric Filiol

The reference French academic treatment of computer virology — the theory, algorithms and practice of viruses and malicious code — by Éric Filiol, a former military cryptanalyst and one of France's leading virologists.

Intermediate

5/52012

Practical Malware Analysis

The Hands-On Guide to Dissecting Malicious Software

Michael Sikorski, Andrew Honig

Still the gold standard textbook for static and dynamic malware analysis on Windows.

Read this if

Students, researchers and serious malware analysts who want the formal, algorithmic foundations of viral code, not just tool tutorials. Filiol writes from deep cryptanalysis and military research experience.

Aspiring threat researchers, blue-teamers who want to read samples instead of forwarding them to a vendor, anyone preparing for GREM.

Skip this if

Beginners or readers wanting a practical malware-analysis walkthrough; it's rigorous, theory-first and mathematical, closer to a graduate text than a lab guide.

Mac/Linux malware, mobile, or modern packed loaders that defeat IDA's autoanalysis. The book is x86 Windows in spirit.

Key takeaways

The canonical French-language text on the theory of computer viruses, by a recognised authority.
Theory- and algorithm-first: formal models of self-reproduction, detection complexity, and viral techniques.
Best read after a practical malware book — it explains why the techniques work, not how to click through a sandbox.

Static and dynamic analysis are two halves of one workflow, not alternatives.
The labs are the book, the chapters are scaffolding to make the labs solvable.
Anti-analysis techniques deserve more time than newcomers usually give them.

How they compare

We rate Practical Malware Analysis higher (5/5 against 4/5 for Les virus informatiques). For most readers, that means Practical Malware Analysis is the primary pick and Les virus informatiques is a useful follow-up.

Les virus informatiques is pitched at advanced level. Practical Malware Analysis is pitched at intermediate level. Read the easier one first if you're not yet comfortable with the topic.

Les virus informatiques and Practical Malware Analysis both cover Malware, Reverse Engineering, so reading them in sequence reinforces the same material from different angles.

Keep reading

Les virus informatiques

→ Alternatives to Les virus informatiques → What to read after Les virus informatiques