{"id":"https://openalex.org/W4285296336","doi":"https://doi.org/10.1109/tsc.2022.3173791","title":"Shrinking the Kernel Attack Surface Through Static and Dynamic Syscall Limitation","display_name":"Shrinking the Kernel Attack Surface Through Static and Dynamic Syscall Limitation","publication_year":2022,"publication_date":"2022-05-10","ids":{"openalex":"https://openalex.org/W4285296336","doi":"https://doi.org/10.1109/tsc.2022.3173791"},"language":"en","primary_location":{"id":"doi:10.1109/tsc.2022.3173791","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsc.2022.3173791","pdf_url":null,"source":{"id":"https://openalex.org/S204223317","display_name":"IEEE Transactions on Services Computing","issn_l":"1939-1374","issn":["1939-1374","2372-0204"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Services Computing","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2510.03720","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038927310","display_name":"Dongyang Zhan","orcid":"https://orcid.org/0000-0003-1981-5878"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dongyang Zhan","raw_affiliation_strings":["School of Cyberspace Science, Harbin Institute of Technology, Harbin, Heilongjiang, China"],"raw_orcid":"https://orcid.org/0000-0003-1981-5878","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science, Harbin Institute of Technology, Harbin, Heilongjiang, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091032374","display_name":"Zhaofeng Yu","orcid":"https://orcid.org/0000-0003-2114-8533"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhaofeng Yu","raw_affiliation_strings":["School of Cyberspace Science, Harbin Institute of Technology, Harbin, Heilongjiang, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyberspace Science, Harbin Institute of Technology, Harbin, Heilongjiang, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5072540013","display_name":"Xiangzhan Yu","orcid":"https://orcid.org/0000-0002-1183-2844"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiangzhan Yu","raw_affiliation_strings":["School of Cyberspace Science, Harbin Institute of Technology, Harbin, Heilongjiang, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Cyberspace Science, Harbin Institute of Technology, Harbin, Heilongjiang, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100417312","display_name":"Hongli Zhang","orcid":"https://orcid.org/0000-0002-8167-7106"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongli Zhang","raw_affiliation_strings":["School of Cyberspace Science, Harbin Institute of Technology, Harbin, Heilongjiang, China"],"raw_orcid":"https://orcid.org/0000-0002-8167-7106","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science, Harbin Institute of Technology, Harbin, Heilongjiang, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100391268","display_name":"Lin Ye","orcid":"https://orcid.org/0000-0002-9647-0271"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lin Ye","raw_affiliation_strings":["School of Cyberspace Science, Harbin Institute of Technology, Harbin, Heilongjiang, China"],"raw_orcid":"https://orcid.org/0000-0002-9647-0271","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science, Harbin Institute of Technology, Harbin, Heilongjiang, China","institution_ids":["https://openalex.org/I204983213"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I204983213"],"apc_list":null,"apc_paid":null,"fwci":1.8551,"has_fulltext":false,"cited_by_count":20,"citation_normalized_percentile":{"value":0.87066386,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":99},"biblio":{"volume":"16","issue":"2","first_page":"1431","last_page":"1443"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11614","display_name":"Cloud Data Security Solutions","score":0.9937999844551086,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/attack-surface","display_name":"Attack surface","score":0.91923588514328},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8633921146392822},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.7042884826660156},{"id":"https://openalex.org/keywords/linux-kernel","display_name":"Linux kernel","score":0.560335099697113},{"id":"https://openalex.org/keywords/block","display_name":"Block (permutation group theory)","score":0.5558440089225769},{"id":"https://openalex.org/keywords/buffer-overflow","display_name":"Buffer overflow","score":0.5173735022544861},{"id":"https://openalex.org/keywords/kernel","display_name":"Kernel (algebra)","score":0.5169252753257751},{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.5137830376625061},{"id":"https://openalex.org/keywords/system-call","display_name":"System call","score":0.5044125318527222},{"id":"https://openalex.org/keywords/call-graph","display_name":"Call graph","score":0.5021207332611084},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.47926756739616394},{"id":"https://openalex.org/keywords/binary-code","display_name":"Binary code","score":0.4628182649612427},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4356534481048584},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.42991429567337036},{"id":"https://openalex.org/keywords/oracle","display_name":"Oracle","score":0.42952775955200195},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.3861319124698639},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.1960429847240448}],"concepts":[{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.91923588514328},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8633921146392822},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.7042884826660156},{"id":"https://openalex.org/C553261973","wikidata":"https://www.wikidata.org/wiki/Q14579","display_name":"Linux kernel","level":2,"score":0.560335099697113},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.5558440089225769},{"id":"https://openalex.org/C40842320","wikidata":"https://www.wikidata.org/wiki/Q19423","display_name":"Buffer overflow","level":2,"score":0.5173735022544861},{"id":"https://openalex.org/C74193536","wikidata":"https://www.wikidata.org/wiki/Q574844","display_name":"Kernel (algebra)","level":2,"score":0.5169252753257751},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.5137830376625061},{"id":"https://openalex.org/C2778579508","wikidata":"https://www.wikidata.org/wiki/Q722192","display_name":"System call","level":2,"score":0.5044125318527222},{"id":"https://openalex.org/C102379954","wikidata":"https://www.wikidata.org/wiki/Q2589940","display_name":"Call graph","level":2,"score":0.5021207332611084},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.47926756739616394},{"id":"https://openalex.org/C63435697","wikidata":"https://www.wikidata.org/wiki/Q864135","display_name":"Binary code","level":3,"score":0.4628182649612427},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4356534481048584},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.42991429567337036},{"id":"https://openalex.org/C55166926","wikidata":"https://www.wikidata.org/wiki/Q2892946","display_name":"Oracle","level":2,"score":0.42952775955200195},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.3861319124698639},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.1960429847240448},{"id":"https://openalex.org/C94375191","wikidata":"https://www.wikidata.org/wiki/Q11205","display_name":"Arithmetic","level":1,"score":0.0},{"id":"https://openalex.org/C114614502","wikidata":"https://www.wikidata.org/wiki/Q76592","display_name":"Combinatorics","level":1,"score":0.0},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/tsc.2022.3173791","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsc.2022.3173791","pdf_url":null,"source":{"id":"https://openalex.org/S204223317","display_name":"IEEE Transactions on Services Computing","issn_l":"1939-1374","issn":["1939-1374","2372-0204"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Services Computing","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2510.03720","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2510.03720","pdf_url":"https://arxiv.org/pdf/2510.03720","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2510.03720","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2510.03720","pdf_url":"https://arxiv.org/pdf/2510.03720","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2080667639","display_name":"\u57fa\u4e8e\u865a\u62df\u673a\u81ea\u7701\u7684\u4e91\u5b89\u5168\u9632\u62a4\u5173\u952e\u6280\u672f\u7814\u7a76","funder_award_id":"61872111","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":53,"referenced_works":["https://openalex.org/W1805474074","https://openalex.org/W1993736952","https://openalex.org/W2098051308","https://openalex.org/W2149237601","https://openalex.org/W2164399967","https://openalex.org/W2182584490","https://openalex.org/W2466114212","https://openalex.org/W2483297248","https://openalex.org/W2550874390","https://openalex.org/W2588479842","https://openalex.org/W2598200822","https://openalex.org/W2605904959","https://openalex.org/W2611291226","https://openalex.org/W2612168751","https://openalex.org/W2614983068","https://openalex.org/W2621197600","https://openalex.org/W2735380434","https://openalex.org/W2753365392","https://openalex.org/W2764162600","https://openalex.org/W2791003924","https://openalex.org/W2792590405","https://openalex.org/W2883468219","https://openalex.org/W2898326323","https://openalex.org/W2899822557","https://openalex.org/W2902718458","https://openalex.org/W2903017094","https://openalex.org/W2925197115","https://openalex.org/W2927543040","https://openalex.org/W2935205354","https://openalex.org/W2936268283","https://openalex.org/W2979739478","https://openalex.org/W2979907307","https://openalex.org/W2985907279","https://openalex.org/W2991611768","https://openalex.org/W2996042910","https://openalex.org/W3015515160","https://openalex.org/W3025812925","https://openalex.org/W3102468935","https://openalex.org/W6638282704","https://openalex.org/W6638487575","https://openalex.org/W6682018898","https://openalex.org/W6730426483","https://openalex.org/W6737094747","https://openalex.org/W6745495452","https://openalex.org/W6747817603","https://openalex.org/W6766726536","https://openalex.org/W6766922533","https://openalex.org/W6767136051","https://openalex.org/W6769004187","https://openalex.org/W6780724457","https://openalex.org/W6782203875","https://openalex.org/W6784165801","https://openalex.org/W6784834832"],"related_works":["https://openalex.org/W2354134599","https://openalex.org/W3082197745","https://openalex.org/W4380793018","https://openalex.org/W2186423725","https://openalex.org/W3040945190","https://openalex.org/W2954975888","https://openalex.org/W3211889887","https://openalex.org/W1601102718","https://openalex.org/W3122803386","https://openalex.org/W2534378520"],"abstract_inverted_index":{"Linux":[0],"Seccomp":[1],"is":[2,39,84,121,146],"widely":[3],"used":[4],"by":[5,63,123,148],"the":[6,10,15,30,34,43,51,79,92,105,133,141,150,153,158,161,170,186,189],"program":[7,54],"developers":[8],"and":[9,26,65,127,144,152,164,184],"system":[11],"maintainers":[12],"to":[13,28,41,131,182],"secure":[14],"operating":[16,35],"systems,":[17],"which":[18,156],"can":[19,98],"block":[20,58],"unused":[21],"syscalls":[22,62,70,145,165,196],"for":[23],"different":[24],"applications":[25],"containers":[27,57],"shrink":[29,132],"attack":[31,75,135,171],"surface":[32,172],"of":[33,45,53,67,188,191],"systems.":[36],"However,":[37],"it":[38,89],"difficult":[40],"configure":[42],"whitelist":[44],"a":[46,72,85,114,178],"container":[47],"or":[48,193],"application":[49],"without":[50],"help":[52],"developers.":[55],"Docker":[56],"about":[59],"only":[60],"50":[61],"default,":[64],"lots":[66],"unblocked":[68],"useless":[69],"introduce":[71],"big":[73],"kernel":[74,134],"surface.":[76,136],"To":[77,167],"obtain":[78],"dependent":[80,116],"syscalls,":[81],"dynamic":[82,128,179],"tracking":[83],"straight-forward":[86],"approach":[87,181],"but":[88,104],"cannot":[90],"get":[91],"full":[93],"syscall":[94,102,117],"list.":[95],"Static":[96],"analysis":[97,118,126],"construct":[99],"an":[100],"over-approximated":[101],"list,":[103],"list":[106],"contains":[107],"many":[108],"false":[109],"positives.":[110],"In":[111],"this":[112],"paper,":[113],"systematic":[115],"approach,":[119],"sysverify,":[120],"proposed":[122],"combining":[124],"static":[125],"verification":[129,180],"together":[130],"The":[137],"semantic":[138],"gap":[139],"between":[140,160],"binary":[142,151],"executables":[143],"bridged":[147],"analyzing":[149],"source":[154],"code,":[155],"builds":[157],"mapping":[159],"library":[162],"APIs":[163],"systematically.":[166],"further":[168],"reduce":[169],"at":[173],"best":[174],"effort,":[175],"we":[176],"propose":[177],"intercept":[183],"analyze":[185],"security":[187],"invocations":[190],"indirect-call-related":[192],"rarely":[194],"invoked":[195],"with":[197],"low":[198],"overhead.":[199]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":7},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":2}],"updated_date":"2026-07-17T09:13:05.818461","created_date":"2025-10-10T00:00:00"}