Kai Tan

AgentSysFilter: A Multi-agent Analysis Approach for Scenario-Aware Syscall Limitation

Modern OS kernels expose hundreds of syscalls to applications, yet individual programs typically require only a small subset. This over-privileging violates the principle of least privilege and expands the kernel attack surface. Existing methods for limiting system calls face several challenges: dynamic tracing suffers...