A NOVEL APPROACH TO DETECTING FILELESS MALWARE ON LINUX-BASED INFORMATION SYSTEMS

The cybersecurity landscape is continually evolving, driven by sophisticated threats that challenge traditional defensive measures. Among these, fileless malware poses a unique threat due to its ability to reside entirely in the memory space. Traditional antivirus software primarily relies on identifying malicious files on disk, a technique inherently ineffective against memory-resident malware, as signature-based approaches cannot directly inspect code residing in memory. The prevalence of Linux-based systems, particularly in cloud environments and IoT devices, has prompted a rise in the occurrence of fileless malware targeting these platforms as well. As a result, defenders struggle to detect threats that leave no trace on disk and abuse trusted processes during execution, requiring new methods that look beyond file-based detection.