Confine: Fine-grained system call filtering for container attack surface reduction
Maryam Rostamipoor, Seyedhamed Ghavamnia, Michalis Polychronakis
Topics & Concepts
Attack surfaceContainer (type theory)Computer scienceSystem callExploitReduction (mathematics)Isolation (microbiology)Code (set theory)Set (abstract data type)Distributed computingHypervisorLinux kernelOperating systemComputer securityVirtualizationCloud computingProgramming languageBiologyEngineeringMechanical engineeringGeometryMathematicsMicrobiologySecurity and Verification in ComputingAdvanced Malware Detection TechniquesNetwork Security and Intrusion Detection