Confine: Automated System Call Policy Generation for Container Attack Surface Reduction
.
2020. Confine: Automated System Call Policy Generation for Container Attack Surface Reduction. 23rd International Symposium on Research in Attacks, Intrusions and Defenses (RAID 2020). :443--458.