Surviving Zero-day Attacks Using Spatial Specialization

doi:10.1016/j.cose.2025.104709

Surviving Zero-day Attacks Using Spatial Specialization

2025-10-26

0

PRE

AI

A

A S M Asadujjaman

E

Eduardo de Lucena Falcão

DOI：10.1016/j.cose.2025.104709

Original

Original request for help

Save

Abstract

En 中文

• A novel approach called spatial specialization that can render zero-day attacks ineffective by restricting malicious usage of system calls while allowing normal application usage. • Implementation of the approach by designing a system that can analyze an application binary to generate a spatial application profile and enforce that profile through an automatically generated program to restrict system calls using Seccomp. • Collection of system calls from six popular server applications, 18 exploit codes, and 12 payloads. • Experimental evaluation to show that the system can protect from 96% attacks and incurs a reasonable performance overhead.

Keywords:

System call filtering

Attack surface reduction

Binary analysis

Exploit mitigation

Surviving Zero-day Attacks Using Spatial Specialization

Abstract

Journal

Organization