LinuxDays 2019

Inspect IoT malware - Intro to Linux tracing and behavioral analysis
2019-10-05, 16:00–16:50, Room 111

Low security standards of current IoT devices popularized Linux as a target platform for malware developers. This talk serves as an introduction to sandbox analysis of malware with main focus on process tracing possibilities inside Linux. The talk summarizes ptrace based tools, syscalls hooking, perf, ftrace, eBPF and SystemTap for behavior analysis.


Difficulty – Intermediate