Shrinking the Kernel Attack Surface Through Static and Dynamic Syscall Limitation

Dongyang Zhan, Zhaofeng Yu, Xiangzhan Yu +2

Linux Seccomp is widely used by the program developers and the system maintainers to secure the operating systems, which can block unused syscalls for different applications and co…