Attribute-based methods for system call filtering
Han Guo · Jisuanji gongcheng yu sheji · 2014
Due to the limitations of the existing methods for system call filtering,an issue that how to filter system call logs more efficiently was studied,and the important information of system calls relating to network attacks was analyzed.Therefore an attribute-based method for system call filtering was proposed.Through tracing and analyzing all the needed attributes of system calls,system call dependency rules were used.The huge system call logs were filtered in a more efficient and effective way on the premise of ensuring the filtering accuracy.Based on this,a system call filtering tool called Separator was implemented and tested in experiments.