The Tangled Genealogy of IoT Malware
Emanuele Cozzi, Pierre‐Antoine Vervier, Matteo Dell’Amico, Yun Shen, Leyla Bilge, Davide Balzarotti
Abstract
The recent emergence of consumer off-the-shelf embedded (IoT) devices and the rise of large-scale IoT botnets has dramatically increased the volume and sophistication of Linux malware observed in the wild. The security community has put a lot of effort to document these threats but analysts mostly rely on manual work, which makes it difficult to scale and hard to regularly maintain. Moreover, the vast amount of code reuse that characterizes IoT malware calls for an automated approach to detect similarities and identify the phylogenetic tree of each family.
Topics & Concepts
MalwareBotnetComputer scienceComputer securityInternet of ThingsSophisticationScale (ratio)Code reuseReuseWorld Wide WebSoftwareOperating systemThe InternetGeographyEngineeringSociologyWaste managementSocial scienceCartographyAdvanced Malware Detection TechniquesNetwork Security and Intrusion DetectionDigital and Cyber Forensics