Main Stage·41 min
Rex Guo · Junyuan Zeng
Rex Guo and Junyuan Zeng present novel techniques that allow unprivileged user-mode Linux processes to execute hidden system calls, bypassing ptrace and auditd.
linuxsyscall-tracingptrace+2
Junyuan Zeng
2 talks in the archive.
Filters+
Loading filters…
1–2 of 2 talks · loading…
Main Stage·39 min
Rex Guo · Junyuan Zeng
Rex Guo and Junyuan Zeng present the Phantom Attack, exploiting implementation flaws in Linux system call tracing frameworks to completely blind endpoint monitoring agents.
syscallsedrlinux+2