Shrinking the Kernel Attack Surface Through Static and Dynamic Syscall Limitation | IEEE Journals & Magazine | IEEE Xplore