Overview
Dive into a comprehensive 48-minute Black Hat conference talk exploring innovative techniques for detecting malware on macOS through network traffic analysis. Discover how to leverage macOS's networking frameworks to enumerate network state, statistics, and traffic directly on the host. Learn about the challenges and opportunities in implementing network-based malware detection on macOS, a platform where such capabilities have been historically limited. Gain insights from security expert Patrick Wardle as he presents programmatic approaches to enhance macOS security by identifying unauthorized network access, a key indicator of malicious code activity. Access the full abstract and presentation materials to deepen your understanding of this cutting-edge approach to macOS malware detection.
Syllabus
Nothing but Net: Leveraging macOS's Networking Frameworks to Heuristically Detect Malware
Taught by
Black Hat