Talk Title:

Journey Into JTAG

Abstract:

Embedded Linux systems often lack package managers and the associated metadata, making it both challenging and time-consuming to identify installed software packages and their dependencies. To address this, we leveraged publicly available data from package repositories to create open source datasets and develop tools capable of determining which package a file likely belongs to. These tools can also construct a dependency graph that can be used to help a reverse engineers to better understand how different software packages on a system are interconnected. In this talk we will present the datasets and tools we developed, demonstrate their practical applications, and share insights from earlier approaches we explored that shaped our current methodology.

Speaker Bio:

Ryan Grachek is currently a cybersecurity software engineer at Lawrence Livermore National Laboratory. His interests include reverse engineering, contributing to open source software development, and automating everything.