DDoS-Capable IoT Malwares: Comparative Analysis and Mirai Investigation

Listing 5

Mirai bot prevents watchdog from rebooting the infected device.

root/mirai/bot/main.c

(71)  if ((wfd = open("/dev/watchdog", 2)) != −1

(72)   || (wfd = open("/dev/misc/watchdog",

      2)) != −1)

(73)  

(74)      int one = 1;

(75)  

(76)      ioctl(wfd, 0x80045704, &one);

(77)      close(wfd);

(78)      wfd = 0;

(79)