{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,22]],"date-time":"2026-01-22T21:48:09Z","timestamp":1769118489229,"version":"3.49.0"},"publisher-location":"New York, NY, USA","reference-count":15,"publisher":"ACM","funder":[{"DOI":"10.13039\/501100000780","name":"European Commission","doi-asserted-by":"publisher","award":["01070141"],"award-info":[{"award-number":["01070141"]}],"id":[{"id":"10.13039\/501100000780","id-type":"DOI","asserted-by":"publisher"}]},{"name":"European Union NextGenerationEU","award":["PE00000018,PE00000014"],"award-info":[{"award-number":["PE00000018,PE00000014"]}]},{"DOI":"10.13039\/501100021856","name":"Ministero dell'Universit\u00e0 e della Ricerca","doi-asserted-by":"publisher","award":["2022LA8XBH"],"award-info":[{"award-number":["2022LA8XBH"]}],"id":[{"id":"10.13039\/501100021856","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2025,8,25]]},"DOI":"10.1145\/3708821.3735342","type":"proceedings-article","created":{"date-parts":[[2025,8,13]],"date-time":"2025-08-13T06:30:56Z","timestamp":1755066656000},"page":"1797-1799","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":1,"title":["POSTER: Transparent Temporally-Specialized System Call Filters"],"prefix":"10.1145","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-6459-0810","authenticated-orcid":false,"given":"Matthew","family":"Rossi","sequence":"first","affiliation":[{"name":"Universit\u00e0 degli Studi di Bergamo, Bergamo, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-4026-8589","authenticated-orcid":false,"given":"Michele","family":"Beretta","sequence":"additional","affiliation":[{"name":"Universit\u00e0 degli Studi di Bergamo, Bergamo, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7534-6055","authenticated-orcid":false,"given":"Dario","family":"Facchinetti","sequence":"additional","affiliation":[{"name":"Universit\u00e0 degli Studi di Bergamo, Bergamo, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0399-1738","authenticated-orcid":false,"given":"Stefano","family":"Paraboschi","sequence":"additional","affiliation":[{"name":"Universit\u00e0 degli Studi di Bergamo, Bergamo, Italy"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2025,8,24]]},"reference":[{"key":"e_1_3_3_2_2_2","volume-title":"Seccomp BPF","year":"2025","unstructured":"2025. Seccomp BPF. https:\/\/docs.kernel.org\/userspace-api\/seccomp_filter.html"},{"key":"e_1_3_3_2_3_2","volume-title":"SlimToolkit","year":"2025","unstructured":"2025. SlimToolkit. https:\/\/slimtoolkit.org\/"},{"key":"e_1_3_3_2_4_2","doi-asserted-by":"publisher","DOI":"10.1109\/CloudCom59040.2023.00033"},{"key":"e_1_3_3_2_5_2","doi-asserted-by":"publisher","DOI":"10.1145\/3607199.3607233"},{"key":"e_1_3_3_2_6_2","volume-title":"BPF: the universal in-kernel virtual machine","author":"Corbet J.","year":"2014","unstructured":"J. Corbet. 2014. BPF: the universal in-kernel virtual machine. https:\/\/lwn.net\/Articles\/599755\/"},{"key":"e_1_3_3_2_7_2","volume-title":"RAID","author":"DeMarinis N.","year":"2020","unstructured":"N. DeMarinis, K. Williams-King, D. Jin, R. Fonseca, and V.P. Kemerlis. 2020. Sysfilter: Automated system call filtering for commodity software. In RAID."},{"key":"e_1_3_3_2_8_2","volume-title":"NDSS","author":"Garfinkel T.","year":"2004","unstructured":"T. Garfinkel, B. Pfaff, and M. Rosenblum. 2004. Ostia: A delegating architecture for secure system call interposition. In NDSS."},{"key":"e_1_3_3_2_9_2","volume-title":"RAID","author":"Ghavamnia S.","year":"2020","unstructured":"S. Ghavamnia, T. Palit, A. Benameur, and M. Polychronakis. 2020. Confine: Automated system call policy generation for container attack surface reduction. In RAID."},{"key":"e_1_3_3_2_10_2","volume-title":"USENIX","author":"Ghavamnia S.","year":"2020","unstructured":"S. Ghavamnia, T. Palit, S. Mishra, and M. Polychronakis. 2020. Temporal system call specialization for attack surface reduction. In USENIX."},{"key":"e_1_3_3_2_11_2","unstructured":"J. Jia Y. ZhuFei D. Williams A. Arcangeli C. Canella H. Franke T. Feldman-Fitzthum D. Skarlatos D. Gruss and T. Xu. 2023. Programmable system call security with eBPF. arXiv (2023)."},{"key":"e_1_3_3_2_12_2","volume-title":"USENIX","author":"Kemerlis V.","year":"2014","unstructured":"V. Kemerlis, Vasileios P., M. Polychronakis, and A.\u00a0D. Keromytis. 2014. ret2dir: Rethinking kernel isolation. In USENIX."},{"key":"e_1_3_3_2_13_2","volume-title":"USENIX ATC","author":"Li Y.","year":"2017","unstructured":"Y. Li, B. Dolan-Gavitt, S. Weber, and J. Justin. 2017. Lock-in-Pop: Securing privileged operating system kernels by keeping on the beaten path. In USENIX ATC."},{"key":"e_1_3_3_2_14_2","volume-title":"USENIX","author":"Linn C.","year":"2005","unstructured":"C. Linn, M. Rajagopalan, S. Baker, C. Collberg, and S.\u00a0Debraya nd J.H.\u00a0Hartman. 2005. Protecting Against Unexpected System Calls. In USENIX."},{"key":"e_1_3_3_2_15_2","doi-asserted-by":"crossref","unstructured":"S. Pailoor X. Wang H. Shacham and I. Dillig. 2020. Automated policy synthesis for system call sandboxing. OOPSLA (2020).","DOI":"10.1145\/3428203"},{"key":"e_1_3_3_2_16_2","volume-title":"USENIX ATC","author":"Yasukata K.","year":"2023","unstructured":"K. Yasukata, H. Tazaki, P.L. Aublin, and K. Ishiguro. 2023. zpoline: a system call hook mechanism based on binary rewriting. In USENIX ATC."}],"event":{"name":"ASIA CCS '25: 20th ACM Asia Conference on Computer and Communications Security","location":"Hanoi Vietnam","acronym":"ASIA CCS '25","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"]},"container-title":["Proceedings of the 20th ACM Asia Conference on Computer and Communications Security"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3708821.3735342","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,8,13]],"date-time":"2025-08-13T07:27:53Z","timestamp":1755070073000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3708821.3735342"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,8,24]]},"references-count":15,"alternative-id":["10.1145\/3708821.3735342","10.1145\/3708821"],"URL":"https:\/\/doi.org\/10.1145\/3708821.3735342","relation":{},"subject":[],"published":{"date-parts":[[2025,8,24]]},"assertion":[{"value":"2025-08-24","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}