Dynamic Image Scanning Through System Tracing

This talk explains how dynamic scanning observes application activity to detect threats that static analysis may miss. It compares dynamic scanning with static scanning and runtime security, and shows how operating system tracing and open source tools can reveal malware behavior.

Syllabus

Intro
Trivy Scan
Known Vulnerabilities
Misconfigurations
Real world evasive malware (DzMLT)
Software supply chain attacks
Static Image Scanning
Runtime Security - Shift Left
Dynamic scan vs. Runtime security
eBPF - Extended Barkley Packet Filter
Tracee
Summary