To Flexibly Tame Kernel Execution With Onsite Analysis

To Flexibly Tame Kernel Execution With Onsite Analysis

Explore the Onsite Analysis Infrastructure (OASIS), a groundbreaking framework for dynamic kernel analysis, in this 26-minute Black Hat conference talk. Learn how OASIS enables programmers to develop kernel analysis applications that control captured kernel thread execution, including tracing, setting thread-specific breakpoints, and collecting data as if running inside the kernel. Discover practical applications of OASIS, such as full-VM memory introspection, system call handler control flow tracing, kernel event monitoring, and kernel malware testing. Presented by Xuhua Ding, this talk offers valuable insights into advanced kernel analysis techniques for cybersecurity professionals and researchers.