D3FEND 技术详情

D3-SCF

D3-SCF

System Call Filtering

定义

Controlling access to local computer system resources with kernel-level capabilities.

父技术
子技术
关联构件
Process
Process

A process is an instance of a computer program that is being executed. It contains the program code and its current activity. Depending on the operating system (OS), a process may be made up of multiple threads of execution that execute instructions concurrently. A computer program is a passive collection of instructions, while a process is the actual execution of those instructions. Several processes may be associated with the same program; for example, opening up several instances of the same program often means more than one process is being executed.

SystemCall
System Call

A system call is the programmatic way in which a computer program requests a service from the kernel of the operating system it is executed on. This may include hardware-related services (for example, accessing a hard disk drive), creation and execution of new processes, and communication with integral kernel services such as process scheduling. System calls provide an essential interface between a process and the operating system.

语义关系
出向filtersSystem Call
出向isolatesProcess
出向kb referenceReference - Analysis of the Windows Vista Security Model - Symantec Corporation
出向kb referenceReference - Architecture of transparent network security for application containers - Neuvector Inc
出向kb referenceReference - Overview of the seccomp sandbox