System call filtering is a widely used security mechanism for protecting a shared OS kernel
against untrusted user applications. However, existing system call filtering techniques either …

One critical attack that exploits kernel vulnerabilities through system call invocations is
considered a serious threat to container security since it results in the privilege escalation …

Phoenix: Surviving Unpatched Vulnerabilities via Accurate and Efficient Filtering of Syscall
Sequences Page 1 Hugo Kermabon-Bobinnec* Yosr Jarraya † , Lingyu Wang*, Suryadipta …

System call filtering is widely used to secure programs in multi-tenant environments, and to
sandbox applications in modern desktop software deployment and package management …

Confidential computing has revolutionized the way of in-use data protection in the Cloud,
using the concept of Trusted Execution Environments (TEEs). Emerging from this paradigm …

Software is ubiquitous in all applications of modern lives. The correct execution of software
is essential for the functionality and security of the underlying device. Fault attacks …

Modern computer systems play a significant role in our everyday life. An essential part of
these systems is the privileged Operating System (OS), which performs specific tasks for less …

This research introduces Warden, a function-level control flow enforcement for web
applications. The goal of Warden is to strengthen the security of the Single Use-Server …

As the number of vulnerabilities continues to increase every year, we require more and more
methods of constraining the applications that run on our systems. Control-Flow Integrity …

Know Where You Come From Page 1 Know Where You Come From Enforcing Program
Behavior Through Syscall Sequences and Origins Claudio Canella May 19, 2022 Graz …