Operating system enhancements to prevent the misuse of system calls

摘要: We propose a cost-e ective mechanism, to control the invocation of critical, from security viewpoint, system calls. The integration into existing UNIX operating systems is carried out by instrumenting code calls so that call itself once invoked checks see whether invoking process and argument values passed comply with rules held in an access database. This method provides simple interception both their do not require changes kernel data structures algorithms. All modi cations are transparent application processes can continue work correctly without needing source or re-compilation. A working prototype has been implemented inside Linux system, able detect block also bu er over ow based attacks.