Preprint
Aug 2026
SysComb: Fine-Grained Transparent System Call Filtering for Attack Surface Reduction
Restricting the system calls available to applications shrinks the kernel's attack surface and greatly mitigates the impact of compromised programs. Recent approaches showcase techniques to generate system call filters, however, all existing solutions require either kernel or application modifications to activate them...
Matthew Rossi, Marco Abbadini, M. Beretta et al.
· 0 citations