SBA Research will be present at UAS St. Pölten’s yearly security conference with talks from our expert Reinhard Kugler, Applied Research Consultant at SBA Research, on Resistence is futile! How a Linux system is assimilated using eBPF rootkit.
Abstract
Kernel Space, the final frontier.
These are the voyages of SBA Research and its mission: to explore strange new technologies, to boldly go where only a few have gone before – using eBPF.
The Cyberspace is vast and numerous threats are lurking in the dark. A new trend arises: abusing the Kernel to backdoor and assimilate sane Linux systems using the eBPF technology. The integration of eBPF in the Kernel allows attackers to change the behavior of the system. How can it be exploited and what can an attacker do with those capabilities? This talk explores the attacker’s view on the eBPF technology and how to abuse it to their advantage. Set phasers to stun and learn about offensive techniques for defenders and analysts in SOCs.
Speaker
Reinhard Kugler
Reinhard specializes in security testing for IT and industrial cyber-physical systems, drawing on his background in cyber defense. He helps companies build security capabilities, develop secure products, and contributes to applied security research. A key focus is applying combinatorial security testing (CST) to industrial domains such as automotive and cloud, where he works with the DAMAST research group.
His expertise spans penetration testing, security assessments, and customized training. Research interests include operating system security, malware techniques, embedded platforms, container security, and automotive cybersecurity.
Reinhard holds a Master’s degree in IT Security from FH Campus Wien, where he wrote his thesis on Android malware with SBA Research. He has professional experience in penetration testing, CSIRT operations, and serves as an external lecturer at FH Campus Wien.
Come by and visit us at our booth!
Further Information
About the event
The IT-SECX serves as a platform for exchanging knowledge and information on trends, technology, and recent developments in the field of IT security. The focus on continuing education is not neglected: Experts present current research projects as well as practical reports and “best practices.”
Fotocredit: © Niklas Schnaubelt