Fascinating paper on IE malware attacks and analysis

David Ross of Microsoft has posted a long, and extremely interesting, paper on analyzing browser-based malware. I recommend reading it even if you only have a passing interest in the subject; there’s a lot of good stuff therein.