Mining sandboxes for Linux containers
A container is a group of processes isolated from other groups via distinct kernel namespaces and resource allocation quota. Attacks against containers often leverage kernel exploits through system call interface. In this paper, we present an approach that mines sandboxes for containers. We first ex...
Saved in:
Main Authors: | WAN, Zhiyuan, LO, David, XIA, Xin, CAI, Liang, LI, Shanping |
---|---|
Format: | text |
Language: | English |
Published: |
Institutional Knowledge at Singapore Management University
2017
|
Subjects: | |
Online Access: | https://ink.library.smu.edu.sg/sis_research/4528 https://ink.library.smu.edu.sg/context/sis_research/article/5531/viewcontent/Mining_sandboxes_Linux_av.pdf |
Tags: |
Add Tag
No Tags, Be the first to tag this record!
|
Institution: | Singapore Management University |
Language: | English |
Similar Items
-
Practical and effective sandboxing for Linux containers
by: WAN, Zhiyuan, et al.
Published: (2019) -
Automated patch backporting in Linux (experience paper)
by: Shariffdeen, Ridwan, et al.
Published: (2021) -
Towards mining comprehensive Android sandboxes
by: LE, Tien-Duy B., et al.
Published: (2018) -
Mining sandboxes: Are we there yet?
by: BAO, Lingfeng, et al.
Published: (2018) -
Concern localization using information retrieval: An empirical study on Linux kernel
by: Wang, S., et al.
Published: (2013)