Methods and systems for system call reduction
AssigneeGeorge Mason University
InventorsKun SUN, Lingguang LEI
Life of this patent
Estimating the term…
Abstract
Disclosed are methods and systems for system call reduction. An application container may be used to encapsulate an application and to determine an operation state of the application. Based on the application state, the application container may determine one or more allowable system calls for the application. The application container may restrict access to one or more system calls excluded from the one or more allowable system calls.
Claims20
A method, comprising:
- determining, by an application container encapsulating an application, an operation state of the application;
- determining, by the application container, based on the operation state of the application, one or more allowable system calls for the application;
- and
- restricting, by the application container, one or more system calls distinct from the one or more allowable system calls.
A system, comprising:
- at least one computing device configured to at least:
- determine, by an application container encapsulating an application, an operation state of the application;
- determine, by the application container, based on the operation state of the application, one or more allowable system calls for the application;
- and
- restrict, by the application container, one or more system calls distinct from the one or more allowable system calls.
A non-transitory computer-readable medium storing processor-executable instructions that, when executed by one or more computing devices, cause the one or more computing devices to:
- determine, by an application container encapsulating an application, an operation state of the application;
- determine, by the application container, based on the operation state of the application, one or more allowable system calls for the application;
- and
- restrict, by the application container, one or more system calls distinct from the one or more allowable system calls.
Dependencies are inferred from the claim text.