Abstract: Limiting the number of system calls used by container processes can effectively reduce the kernel attack surface. Existing container system call restriction schemes only focus on the minimum ...
Some results have been hidden because they may be inaccessible to you
Show inaccessible results