SysComb: Fine-Grained Transparent System Call Filtering for Attack Surface Reduction

Matthew Rossi, Marco Abbadini, Michele Beretta +2

Restricting the system calls available to applications shrinks the kernel's attack surface and greatly mitigates the impact of compromised programs. Recent approaches showcase tech…