// Comparison

Practical Malware Analysis vs Techniques virales avancées: Which Should You Read?

Two cybersecurity books on Malware, compared honestly: who each is for, what each does best, and which to read first.

Intermediate

5/52012

Practical Malware Analysis

The Hands-On Guide to Dissecting Malicious Software

Michael Sikorski, Andrew Honig

Still the gold standard textbook for static and dynamic malware analysis on Windows.

Advanced

4/52007

Techniques virales avancées

Éric Filiol

Specialized follow-up to Filiol's Les virus informatiques. Dives into advanced malicious-code attack techniques and their defensive analysis.

Read this if

Aspiring threat researchers, blue-teamers who want to read samples instead of forwarding them to a vendor, anyone preparing for GREM.

Readers who've worked through Les virus informatiques and want the next level on evasion, polymorphism, metamorphism.

Skip this if

Mac/Linux malware, mobile, or modern packed loaders that defeat IDA's autoanalysis. The book is x86 Windows in spirit.

Readers who haven't read the prior volume. Filiol leans on the formalism set there.

Key takeaways

Static and dynamic analysis are two halves of one workflow, not alternatives.
The labs are the book, the chapters are scaffolding to make the labs solvable.
Anti-analysis techniques deserve more time than newcomers usually give them.

Offense/defense companion to the same school — one of the few French-language titles that goes to this level of detail.
Particularly useful for understanding older classes of evasion techniques that resurface in modern implants.
Together with Les virus informatiques, the most complete French-language academic foundation on the topic.

How they compare

We rate Practical Malware Analysis higher (5/5 against 4/5 for Techniques virales avancées). For most readers, that means Practical Malware Analysis is the primary pick and Techniques virales avancées is a useful follow-up.

Practical Malware Analysis is pitched at intermediate level. Techniques virales avancées is pitched at advanced level. Read the easier one first if you're not yet comfortable with the topic.

Practical Malware Analysis and Techniques virales avancées both cover Malware, Reverse Engineering, Defensive, so reading them in sequence reinforces the same material from different angles.

Keep reading