LinuxDays 2019

Inspect IoT malware - Intro to Linux tracing and behavioral analysis
05.10.2019 , 111
Jazyk: English

Low security standards of current IoT devices popularized Linux as a target platform for malware developers. This talk serves as an introduction to sandbox analysis of malware with main focus on process tracing possibilities inside Linux. The talk summarizes ptrace based tools, syscalls hooking, perf, ftrace, eBPF and SystemTap for behavior analysis.


Obtížnost

Mírně pokročilí

Viz také: slides (44,1 KB)