Programmable system call security with ebpf

J Jia, YF Zhu, D Williams, A Arcangeli… - arxiv preprint arxiv …, 2023 - arxiv.org
System call filtering is a widely used security mechanism for protecting a shared OS kernel
against untrusted user applications. However, existing system call filtering techniques either …

Sfip: Coarse-grained syscall-flow-integrity protection in modern systems

C Canella, S Dorn, D Gruss, M Schwarz - arxiv preprint arxiv:2202.13716, 2022 - arxiv.org
Growing code bases of modern applications have led to a steady increase in the number of
vulnerabilities. Control-Flow Integrity (CFI) is one promising mitigation that is more and more …

Sandboxing Adoption in Open Source Ecosystems

M Alhindi, J Hallett - Proceedings of the 12th ACM/IEEE International …, 2024 - dl.acm.org
Sandboxing mechanisms allow developers to limit how much access applications have to
resources, following the least-privilege principle. However, it's not clear how much and in …

[PDF][PDF] Hardening the Kernel Against Unprivileged Attacks

C Canella - 2022 - cc0x1f.net
Modern computer systems play a significant role in our everyday life. An essential part of
these systems is the privileged Operating System (OS), which performs specific tasks for less …