Seccomp Filters from Fuzzing

Marcus Gelderie; Valentin Barth; Maximilian Luff; Julian Birami

Research.Publish.Connect.

*Please fill out at least one Field. *Value must be an number!

Title:
ISBN:
Year:
Acronym:
Subject:

Advanced Search Proceedings Search

If you're looking for an exact phrase use quotation marks on text fields.

*Please fill out at least one Field.

Title:
Author:
Affiliation:
Subject:

Advanced Search Papers Search

If you're looking for an exact phrase use quotation marks on text fields.

*Please fill out at least one Field.

Name:
Affiliation:
Country:
Conference:
Subject:

Advanced Search Authors Search

If you're looking for an exact phrase use quotation marks on text fields.

*Please fill out at least one Field.

Name:
Country:
Subject:

Advanced Search Affiliations Search

If you're looking for an exact phrase use quotation marks on text fields.

Proceedings

Proceedings Search *Please fill out at least one Field. *Value must be an number!

Title:
ISBN:
Year:
Acronym:
Subject:

Advanced Search Proceedings Search

If you're looking for an exact phrase use quotation marks on text fields.

Papers

Papers Search *Please fill out at least one Field.

Title:
Author:
Affiliation:
Subject:

Advanced Search Papers Search

If you're looking for an exact phrase use quotation marks on text fields.

Authors

Authors Search *Please fill out at least one Field.

Name:
Affiliation:
Country:
Conference:
Subject:

Advanced Search Authors Search

If you're looking for an exact phrase use quotation marks on text fields.

Advanced Search

Paper

Seccomp Filters from Fuzzing

Topics: Intrusion Detection & Prevention; Security and Privacy in IT Outsourcing; Security Deployment; Software Security

In Proceedings of the 19th International Conference on Security and Cryptography SECRYPT - Volume 1, 507-512, 2022 , Lisbon, Portugal

Authors: Marcus Gelderie ; Valentin Barth ; Maximilian Luff and Julian Birami

Affiliation: Aalen University of Applied Sciences, Beethovenstraße 1, Aalen, Germany

Keyword(s): Fuzzing, Seccomp, Sandbox, Dynamic Analysis.

Abstract: Seccomp is an integral part of Linux sandboxes, but intimate knowledge of the required syscalls of a program are required. We present a fuzzer-based dynamic approach to auto-generate seccomp filters that permit only the required syscalls. In our model, a syscall is required, if any execution path leads to its invocation. Our implementation combines a symbolic execution step and a custom mutator to take command line flags into account and achieve a large coverage of the SUT. We provide an evaluation of our tool on popular command line tools and find up to 100% of the system calls found through manual analysis.

CC BY-NC-ND 4.0

Guest: Register as new SciTePress user now for free.

SciTePress user: please login.

My Papers

You are not signed in, therefore limits apply to your IP address 3.15.237.255

In the current month:

Recent papers: 100 available of 100 total

2⁺ years older papers: 200 available of 200 total

Paper citation in several formats:

Gelderie, M.; Barth, V.; Luff, M. and Birami, J. (2022). Seccomp Filters from Fuzzing. In Proceedings of the 19th International Conference on Security and Cryptography - SECRYPT; ISBN 978-989-758-590-6; ISSN 2184-7711, SciTePress, pages 507-512. DOI: 10.5220/0011145100003283

@conference{secrypt22,
author={Marcus Gelderie. and Valentin Barth. and Maximilian Luff. and Julian Birami.},
title={Seccomp Filters from Fuzzing},
booktitle={Proceedings of the 19th International Conference on Security and Cryptography - SECRYPT},
year={2022},
pages={507-512},
publisher={SciTePress},
organization={INSTICC},
doi={10.5220/0011145100003283},
isbn={978-989-758-590-6},
issn={2184-7711},
}

TY - CONF

JO - Proceedings of the 19th International Conference on Security and Cryptography - SECRYPT
TI - Seccomp Filters from Fuzzing
SN - 978-989-758-590-6
IS - 2184-7711
AU - Gelderie, M.
AU - Barth, V.
AU - Luff, M.
AU - Birami, J.
PY - 2022
SP - 507
EP - 512
DO - 10.5220/0011145100003283
PB - SciTePress