Soumyakant Priyadarshan

Applying System Call Filtering to Real-World Binaries (Experience Paper)

System call filtering restricts applications to the system calls they require, but inferring accurate syscall sets for binary-only programs remains challenging. A central difficulty lies in recovering precise control-flow information from binaries: over-approximation leads to ove...