SwitchBlade: Enforcing Dynamic Personalized System Call Models

摘要

System call interposition is a common approach to restrict the power of applications and to detect code injections. It enforces a model that describes what system calls and/or what sequences thereof are permitted. However, there exist various issues like