A FILTERING MECHANISM FOR SECURING LINUX KERNEL

摘要

pVarious methods have been proposed for protecting the Linux kernel against various vulnerabilities. However, many of them require changes in the kernel itself leading to long testing and debugging periods. They also run the risks of introducing new bugs. The invention provides an alternate, safer method to do the same by providing wrappers around the kernel. This reduces the amount of testing needed since the new security code will be introduced only into the wrappers and also provides flexibility in various layers. The filters can be customized per se to suit the various security needs. The overhead incurred due to this is very low./p