rethinking unix syscalls
summary
An overview of the history and implementation of Unix system calls, then an introduction of several proposed system calls intended to replace traditional ones. Also describes techniques to make it harder for attackers to reuse syscall-based exploit code for common attacks.
AI-written summary · about
related talks
01h 03mUsing seccomp to limit the Linux kernel attack service
32mDesigning to the Worst Case Scenario - Practical System Call Filtering with Seccomp
31mHandling New Syscalls in Seccomp Filters
28mUnderstanding programmable system call security with Secomp-eBPF in Linux.
57mReturn Oriented Programming, an introduction
26mReinventing Seccomp for Fun and Profiles
50mImproving Container Security with System Call Interception
50mThe state of container security