This repository contains the source code related to the research paper titled "Temporal System Call Specialization for Attack Surface Reduction" published in the Proceedings of the 29th Usenix Security Symposium (2020).
☆40Nov 14, 2024Updated last year
Alternatives and similar repositories for temporal-specialization
Users that are interested in temporal-specialization are comparing it to the libraries listed below. We may earn a commission when you buy through links labeled 'Ad' on this page.
Sorting:
- This is the repository for the code and artifacts related to the CCS2022 paper: C2C: Fine-grained Configuration-driven System Call Filter…☆11Nov 4, 2022Updated 3 years ago
- ☆13Oct 17, 2021Updated 5 years ago
- This tool set can generate SECCOMP profiles for Docker images. It mainly relies on static analysis, making its results more reliable than…☆72May 3, 2022Updated 4 years ago
- ☆13Apr 9, 2022Updated 4 years ago
- ☆48Nov 15, 2021Updated 4 years ago
- End-to-end encrypted email - Proton Mail • AdSpecial offer: 40% Off Yearly / 80% Off First Month. All Proton services are open source and independently audited for security.
- Pre-built bitcode files for the Linux kernel☆22Sep 18, 2019Updated 7 years ago
- Simple password-wallet application based on Intel SGX for linux.☆17May 2, 2020Updated 6 years ago
- ☆14Dec 10, 2021Updated 4 years ago
- RISC-V Tools (GNU Toolchain, ISA Simulator, Tests)☆23May 9, 2019Updated 7 years ago
- ☆38May 19, 2023Updated 3 years ago
- Automatic Compartments for Embedded Systems☆24Mar 6, 2020Updated 6 years ago
- ☆20Mar 10, 2022Updated 4 years ago
- [USENIX SECURITY'19] PeX: A Permission Check Analysis Framework for Linux Kernel☆82Dec 30, 2021Updated 4 years ago
- BDA: Practical Dependence Analysis for Binary Executables by Unbiased Whole-program Path Sampling and Per-path Abstract Interpretation☆31Feb 26, 2021Updated 5 years ago
- Wordpress hosting with auto-scaling - Free Trial Offer • AdFully Managed hosting for WordPress and WooCommerce businesses that need reliable, auto-scalable performance. Cloudways SafeUpdates now available.
- ☆28Jun 2, 2024Updated 2 years ago
- Stealthy Attacks against Robotic Vehicles. Please read the following paper before trying out the attacks.☆15Oct 20, 2022Updated 4 years ago
- Uncovering Container Confusion in the Linux Kernel☆47Feb 27, 2024Updated 2 years ago
- Hodor for node.js☆15Jun 18, 2023Updated 3 years ago
- K-Miner☆75Jun 5, 2019Updated 7 years ago
- ☆39Feb 4, 2026Updated 8 months ago
- ☆36May 15, 2022Updated 4 years ago
- ☆12Dec 21, 2016Updated 9 years ago
- ☆24Nov 23, 2019Updated 6 years ago
- Deploy to Railway using AI coding agents - Free Credits Offer • AdUse Claude Code, Codex, OpenCode, and more. Autonomous software development now has the infrastructure to match with Railway.
- Datasets of the paper: Detecting "0-Day" Vulnerability: An Empirical Study of Secret Security Patch in OSS☆20Apr 9, 2019Updated 7 years ago
- Hodor-PKU☆27Sep 14, 2021Updated 5 years ago
- An Automated Heap Feng Shui Tool☆18Jun 27, 2022Updated 4 years ago
- MMIO based security reference monitor☆13Mar 9, 2022Updated 4 years ago
- Building Distributed Enclave Applications with Sancus and SGX☆16Dec 9, 2020Updated 5 years ago
- ☆27Nov 16, 2021Updated 4 years ago
- The published code repo for the Cortex-M SoK paper.☆29Feb 5, 2026Updated 8 months ago
- ☆23Nov 16, 2023Updated 2 years ago
- Practical Data-Only Attack Generation☆48Jun 7, 2024Updated 2 years ago
- AI Agents on DigitalOcean Gradient AI Platform • AdBuild production-ready AI agents using customizable tools or access multiple LLMs through a single endpoint. Create custom knowledge bases or connect external data.
- Precise and high-order static points-to/taint analysis based on LLVM IR.☆93Sep 18, 2025Updated last year
- Detect missing check bugs in OS kernels☆117Sep 23, 2023Updated 3 years ago
- A general cross-architecture C/C++ hotpatch solution using customized userspace eBPF runtime. One patch release can fix the same vulnera…☆31Nov 4, 2023Updated 2 years ago
- Context, field, and array-sensitive heap analysis for LLVM based on DSA.☆170Updated this week
- FirmGuide: Boosting the Capability of Rehosting Embedded Linux Kernels through Model-Guided Kernel Execution☆23May 29, 2023Updated 3 years ago
- Top-level companion software artifact for the paper "Provably-Safe Multilingual Software Sandboxing using WebAssembly"☆42Aug 30, 2022Updated 4 years ago
- This tool set can generate required capabilities for binaries. A system call to capability mapping is used to assign capability to the bi…☆14Oct 26, 2022Updated 4 years ago