{"id":"https://openalex.org/W4379618862","doi":"https://doi.org/10.1145/3555776.3577593","title":"Free Willy: Prune System Calls to Enhance Software Security","display_name":"Free Willy: Prune System Calls to Enhance Software Security","publication_year":2023,"publication_date":"2023-03-27","ids":{"openalex":"https://openalex.org/W4379618862","doi":"https://doi.org/10.1145/3555776.3577593"},"language":"en","primary_location":{"id":"doi:10.1145/3555776.3577593","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3555776.3577593","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3555776.3577593","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 38th ACM/SIGAPP Symposium on Applied Computing","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3555776.3577593","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5083819305","display_name":"Charlie Groh","orcid":"https://orcid.org/0000-0002-1383-1183"},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Charlie Groh","raw_affiliation_strings":["Technical University of Munich, Germany"],"raw_orcid":"https://orcid.org/0000-0002-1383-1183","affiliations":[{"raw_affiliation_string":"Technical University of Munich, Germany","institution_ids":["https://openalex.org/I62916508"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103119931","display_name":"Sergej Proskurin","orcid":"https://orcid.org/0000-0002-0524-2493"},"institutions":[{"id":"https://openalex.org/I62916508","display_name":"Technical University of Munich","ror":"https://ror.org/02kkvpp62","country_code":"DE","type":"education","lineage":["https://openalex.org/I62916508"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Sergej Proskurin","raw_affiliation_strings":["Technical University of Munich, Germany"],"raw_orcid":"https://orcid.org/0000-0002-0524-2493","affiliations":[{"raw_affiliation_string":"Technical University of Munich, Germany","institution_ids":["https://openalex.org/I62916508"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065154871","display_name":"Apostolis Zarras","orcid":"https://orcid.org/0000-0002-8480-6989"},"institutions":[{"id":"https://openalex.org/I154757721","display_name":"University of Piraeus","ror":"https://ror.org/02qs84g94","country_code":"GR","type":"education","lineage":["https://openalex.org/I154757721"]},{"id":"https://openalex.org/I8901234","display_name":"Foundation for Research and Technology Hellas","ror":"https://ror.org/052rphn09","country_code":"GR","type":"facility","lineage":["https://openalex.org/I8901234"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Apostolis Zarras","raw_affiliation_strings":["Foundation for Research and Technology -- Hellas, Heraklion, Greece","University of Piraeus, Greece","University of Piraeus, Greece Foundation for Research and Technology -- Hellas, Heraklion, Greece"],"raw_orcid":"https://orcid.org/0000-0002-8480-6989","affiliations":[{"raw_affiliation_string":"Foundation for Research and Technology -- Hellas, Heraklion, Greece","institution_ids":["https://openalex.org/I8901234"]},{"raw_affiliation_string":"University of Piraeus, Greece","institution_ids":["https://openalex.org/I154757721"]},{"raw_affiliation_string":"University of Piraeus, Greece Foundation for Research and Technology -- Hellas, Heraklion, Greece","institution_ids":["https://openalex.org/I8901234","https://openalex.org/I154757721"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1522","last_page":"1529"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9821000099182129,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12479","display_name":"Web Application Security Vulnerabilities","score":0.9821000099182129,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10927","display_name":"Access Control and Trust","score":0.9764000177383423,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9713000059127808,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7631080150604248},{"id":"https://openalex.org/keywords/container","display_name":"Container (type theory)","score":0.5920454859733582},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5713212490081787},{"id":"https://openalex.org/keywords/static-analysis","display_name":"Static analysis","score":0.5702177286148071},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5574082136154175},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.5232792496681213},{"id":"https://openalex.org/keywords/security-analysis","display_name":"Security analysis","score":0.5023720264434814},{"id":"https://openalex.org/keywords/buffer-overflow","display_name":"Buffer overflow","score":0.4421248435974121},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.42791467905044556},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.32191967964172363},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.2746143937110901},{"id":"https://openalex.org/keywords/programming-language","display_name":"Programming language","score":0.13370966911315918},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.10720980167388916}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7631080150604248},{"id":"https://openalex.org/C2781018962","wikidata":"https://www.wikidata.org/wiki/Q5164884","display_name":"Container (type theory)","level":2,"score":0.5920454859733582},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5713212490081787},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.5702177286148071},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5574082136154175},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.5232792496681213},{"id":"https://openalex.org/C38369872","wikidata":"https://www.wikidata.org/wiki/Q7445009","display_name":"Security analysis","level":2,"score":0.5023720264434814},{"id":"https://openalex.org/C40842320","wikidata":"https://www.wikidata.org/wiki/Q19423","display_name":"Buffer overflow","level":2,"score":0.4421248435974121},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.42791467905044556},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.32191967964172363},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.2746143937110901},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.13370966911315918},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.10720980167388916},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3555776.3577593","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3555776.3577593","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3555776.3577593","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 38th ACM/SIGAPP Symposium on Applied Computing","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3555776.3577593","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3555776.3577593","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3555776.3577593","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 38th ACM/SIGAPP Symposium on Applied Computing","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1976097705","display_name":null,"funder_award_id":"883275","funder_id":"https://openalex.org/F4320332999","funder_display_name":"Horizon 2020 Framework Programme"},{"id":"https://openalex.org/G6986315407","display_name":"A SECURE HEALTHCARE ENVIRONMENT FOR INFORMATICS RESILIENCE","funder_award_id":"883275","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G7842005466","display_name":null,"funder_award_id":"Horizon 2020","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320332999","display_name":"Horizon 2020 Framework Programme","ror":"https://ror.org/00k4n6c32"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4379618862.pdf","grobid_xml":"https://content.openalex.org/works/W4379618862.grobid-xml"},"referenced_works_count":3,"referenced_works":["https://openalex.org/W2614129090","https://openalex.org/W4299301436","https://openalex.org/W4299522686"],"related_works":["https://openalex.org/W107132618","https://openalex.org/W1972760175","https://openalex.org/W2887198767","https://openalex.org/W4233969565","https://openalex.org/W4283264706","https://openalex.org/W1515699938","https://openalex.org/W4387360145","https://openalex.org/W946883631","https://openalex.org/W2390718939","https://openalex.org/W1994367926"],"abstract_inverted_index":{"Many":[0],"privilege":[1],"escalation":[2],"exploits":[3],"on":[4,31,139,184],"Linux":[5],"abuse":[6],"vulnerable":[7],"system":[8,85,116,176],"calls":[9,86,177],"to":[10,52,117,128,165,172],"threaten":[11],"the":[12,35,42,81,92,102,143,179],"system's":[13,103],"security.":[14],"Therefore,":[15],"various":[16],"static":[17],"and":[18,73,110,125,133],"dynamic":[19],"analysis":[20],"based":[21],"seccomp":[22,66,99,167,182],"policy":[23,183],"generation":[24],"frameworks":[25],"emerged.":[26],"Yet,":[27],"they":[28],"either":[29],"focus":[30],"a":[32,61,150],"subset":[33],"of":[34,45,142],"available":[36],"binaries":[37,121],"or":[38],"are":[39,50],"constrained":[40],"by":[41],"inherent":[43],"properties":[44,141],"dynamic,":[46],"testing-based":[47],"analysis,":[48],"which":[49,154],"prone":[51],"false":[53],"negatives.":[54],"In":[55,146],"this":[56],"paper,":[57],"we":[58,112,148,155],"present":[59],"Jesse,":[60],"static-analysis-based":[62],"framework":[63],"for":[64,68,87,122],"generating":[65],"policies":[67,168],"ELF":[69,120],"binaries.":[70,90,145],"We":[71],"design":[72],"implement":[74],"an":[75],"abstract-interpretation-based":[76],"constant":[77,158],"propagation":[78,159],"that":[79,169],"helps":[80],"analyst":[82],"identify":[83],"vital":[84],"arbitrary,":[88],"non-obfuscated":[89],"Using":[91],"extracted":[93],"results,":[94,136],"Jesse":[95],"allows":[96],"producing":[97],"effective":[98],"policies,":[100],"reducing":[101],"attack":[104],"vector.":[105],"To":[106],"assess":[107],"Jesse's":[108,157],"effectiveness":[109],"accuracy,":[111],"have":[113],"applied":[114],"our":[115],"over":[118],"1,000":[119],"Debian":[123],"10,":[124],"show":[126],"that---contrary":[127],"existing":[129],"solutions---Jesse":[130],"produces":[131],"accurate":[132],"safely":[134],"approximated":[135],"without":[137],"relying":[138],"any":[140],"target":[144],"addition,":[147],"conduct":[149],"case":[151],"study":[152],"in":[153],"combine":[156],"strategy":[160],"with":[161],"container":[162],"debloating":[163],"techniques":[164],"produce":[166],"restrict":[170],"up":[171],"five":[173],"times":[174],"more":[175],"than":[178],"Docker's":[180],"default":[181],"average.":[185]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}