ELF Analyzer Demo: Online Identification for IoT Malwares with Multiple Hardware Architectures

ELF Analyzer Demo: Online Identification for IoT Malwares with Multiple Hardware Architectures

연구 분야: Safety

학회: 2020 IEEE Security and Privacy Workshops (SPW)

This demonstration presents an automatic IoT runtime platform with a web interface, ELF Analyzer, where suspicious ELF files uploaded by users could be executed and dynamically analyzed for malicious behavior identification. The key component of our platform is a crafted IoT sandbox, where multiple hardware architectures are emulated using QEMU. With the introduction of strace functionality, we demonstrate that system call and traffic logs of an uploaded ELF file with different hardware architectures can be generated successfully. After proper analysis, malicious ELF files can be identified.