SWAT4J: Generating System Call Allowlist for Java Container Attack Surface Reduction

被引:0
|
作者
Xu, Yijiang [1 ,2 ,3 ]
Zhou, Muxian [1 ,3 ]
Gao, Qing [1 ,2 ,3 ]
Zhang, Shikun [1 ,2 ,3 ]
Wu, Zhonghai [1 ,2 ,3 ]
机构
[1] Peking University, Key Laboratory of High Confidence Software Technologies, MoE, China
[2] Peking University, National Engineering Research Center of Software Engineering, Beijing, China
[3] School of Software and Microelectronics, Peking University, Beijing, China
关键词
C++ (programming language) - Containers - [!text type='Java']Java[!/text] programming language - Open source software - Security systems;
D O I
暂无
中图分类号
学科分类号
摘要
引用
收藏
页码:929 / 939
相关论文
共 6 条
  • [1] Sprofiler: Automatic Generating System of Container-Native System Call Filtering Rules for Attack Surface Reduction
    Iiguni, Takashi
    Kamei, Hitoshi
    Saisho, Keizo
    2021 INTERNATIONAL CONFERENCE ON COMPUTATIONAL SCIENCE AND COMPUTATIONAL INTELLIGENCE (CSCI 2021), 2021, : 704 - 709
  • [2] Confine: Fine-grained system call filtering for container attack surface reduction
    Rostamipoor, Maryam
    Ghavamnia, Seyedhamed
    Polychronakis, Michalis
    COMPUTERS & SECURITY, 2023, 132
  • [3] Optimus: association-based dynamic system call filtering for container attack surface reduction
    Yang, Seungyong
    Kang, Brent Byunghoon
    Nam, Jaehyun
    JOURNAL OF CLOUD COMPUTING-ADVANCES SYSTEMS AND APPLICATIONS, 2024, 13 (01):
  • [4] Optimus: association-based dynamic system call filtering for container attack surface reduction
    Seungyong Yang
    Brent Byunghoon Kang
    Jaehyun Nam
    Journal of Cloud Computing, 13
  • [5] Prof-gen: Practical Study on System Call Whitelist Generation for Container Attack Surface Reduction
    Kim, Sungjin
    Kim, Byung Joon
    Lee, Dong Hoon
    2021 IEEE 14TH INTERNATIONAL CONFERENCE ON CLOUD COMPUTING (CLOUD 2021), 2021, : 278 - 287
  • [6] Temporal System Call Specialization for Attack Surface Reduction
    Ghavamnia, Seyedhamed
    Palit, Tapti
    Mishra, Shachee
    Polychronakis, Michalis
    PROCEEDINGS OF THE 29TH USENIX SECURITY SYMPOSIUM, 2020, : 1749 - 1766