Apparatus and method for generating system call whitelist of application container and method for controlling system call of application container

An apparatus for generating a system call whitelist for an application container, comprising:

• memory in which at least one program is recorded;
• and
• a processor for executing the at least one program,
• wherein the at least one program performs:
• determining whether a running container is based on machine code or non-machine code by analyzing an internal configuration of the running container;
• identifying system calls included in an application through binary static analysis when the container is determined to be based on machine code, and through static analysis of source code when the container is determined to be based on non-machine code;
• and
• generating a whitelist based on numbers of all of the system calls identified through the binary static analysis and the static analysis of source code.