Rogue Code

2014-06-02

Paul Baccas

Proofpoint, UK
Editor: Martijn Grooten

Abstract

Paul Baccas reviews the third novel in Mark Russinovich's Jeff Aiken series.


Title: Rogue Code: A Jeff Aiken Novel

Author: Mark Russinovich

Publisher: Thomas Dunne Books

ISBN-13: 978-1250035370

Rogue Code is security researcher Mark Russinovich’s third novel featuring the main character Jeff Aiken, and like the previous two (Zero Day and Trojan Horse), is a modern techno-thriller with equal emphasis on both techno and thriller. The plot revolves around the world of high finance, particularly High Frequency Trading (HFT) and IPOs, and is mainly based in and around Wall Street. The timing of the book is particularly fortunate in that both editions of The Times (London and New York) feature in their list of non-fiction best sellers Flash Boys, by Michael Lewis, which describes the world of HFT and how it has changed share trading, and the market, forever.

As in the previous two novels, each chapter is introduced with either a memorandum or a vignette of the people/things affected by the rogue code – this does not hamper the pace of the book, and in fact adds to its depth. The characterization of the minor characters has improved since the first novel in the series, and I suspect that we may see some of them appearing in future books (as a protagonist, Jeff Aiken has at least three more major malware/computer security themes to tackle). There are several side themes that suggest that more stories may be in the pipeline: Jeff’s relationship with colleague Daryl, and the internecine strife between (ex )members of certain three-letter agencies with current (or former) members of other three-letter agencies.

Mark knows his subject in depth – and any area in which he doesn’t have direct experience, he researches, and that shows. Sometimes the explanations and details are superfluous after the first mention (for example, detailing the manufacturer, type, and model of the bad guys’ firearms wasn’t necessary more than once). Perhaps taking out the exposition of the story and adding an Afterword or Addendum with some of these details would help to keep the flow smooth and fast.

I enjoyed the latest instalment of the Jeff Aiken series and would recommend you consider this for your summer vacation reading. Mark seems to be on an 18-month product release cycle and I look forward to version 4.0.

twitter.png
fb.png
linkedin.png
hackernews.png
reddit.png

 

Latest articles:

Nexus Android banking botnet – compromising C&C panels and dissecting mobile AppInjects

Aditya Sood & Rohit Bansal provide details of a security vulnerability in the Nexus Android botnet C&C panel that was exploited to compromise the C&C panel in order to gather threat intelligence, and present a model of mobile AppInjects.

Cryptojacking on the fly: TeamTNT using NVIDIA drivers to mine cryptocurrency

TeamTNT is known for attacking insecure and vulnerable Kubernetes deployments in order to infiltrate organizations’ dedicated environments and transform them into attack launchpads. In this article Aditya Sood presents a new module introduced by…

Collector-stealer: a Russian origin credential and information extractor

Collector-stealer, a piece of malware of Russian origin, is heavily used on the Internet to exfiltrate sensitive data from end-user systems and store it in its C&C panels. In this article, researchers Aditya K Sood and Rohit Chaturvedi present a 360…

Fighting Fire with Fire

In 1989, Joe Wells encountered his first virus: Jerusalem. He disassembled the virus, and from that moment onward, was intrigued by the properties of these small pieces of self-replicating code. Joe Wells was an expert on computer viruses, was partly…

Run your malicious VBA macros anywhere!

Kurt Natvig wanted to understand whether it’s possible to recompile VBA macros to another language, which could then easily be ‘run’ on any gateway, thus revealing a sample’s true nature in a safe manner. In this article he explains how he recompiled…


Bulletin Archive

We have placed cookies on your device in order to improve the functionality of this site, as outlined in our cookies policy. However, you may delete and block all cookies from this site and your use of the site will be unaffected. By continuing to browse this site, you are agreeing to Virus Bulletin's use of data as outlined in our privacy policy.