Confine: Automated System Call Policy Generation for Container Attack Surface Reduction

TitleConfine: Automated System Call Policy Generation for Container Attack Surface Reduction
Publication TypeConference Paper
Year of Publication2020
AuthorsGhavamnia S, Palit T, Benameur A, Polychronakis M
Conference Name23rd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2020)
Date Published10/2020
PublisherUSENIX Association
Conference LocationSan Sebastian
ISBN Number978-1-939133-18-2
URLhttps://www.usenix.org/conference/raid2020/presentation/ghavanmnia