papers
Publications (3)
cs.CR2025
Exploring and Exploiting the Resource Isolation Attack Surface of WebAssembly Containers
Zhaofeng Yu, Dongyang Zhan, Lin Ye +3
Recently, the WebAssembly (or Wasm) technology has been rapidly evolving, with many runtimes actively under development, providing cross-platform secure sandboxes for Wasm modules…
cs.CR2025
Shrinking the Kernel Attack Surface Through Static and Dynamic Syscall Limitation
Dongyang Zhan, Zhaofeng Yu, Xiangzhan Yu +2
Linux Seccomp is widely used by the program developers and the system maintainers to secure the operating systems, which can block unused syscalls for different applications and co…
cs.CR2025
Securing Operating Systems Through Fine-grained Kernel Access Limitation for IoT Systems
Dongyang Zhan, Zhaofeng Yu, Xiangzhan Yu +3
With the development of Internet of Things (IoT), it is gaining a lot of attention. It is important to secure the embedded systems with low overhead. The Linux Seccomp is widely us…