KFU. Card publication. Designing a system call analyser for system calls used inside Linux containers.

KAZAN
FEDERAL UNIVERSITY

- RUS
- 中文
- ES

DESIGNING A SYSTEM CALL ANALYSER FOR SYSTEM CALLS USED INSIDE LINUX CONTAINERS.

Form of presentation

Articles in Russian journals and collections

Year of publication

2024

��

��

Authors, employees of KFU

Valiev Marat Rinadovich, author

Bibliographic description in the original language

Designing a system call analyser for system calls used inside Linux containers. BIO Web Conf. Volume 138, 2024 International Scientific and Practical Conference “Development and Modern Problems of Aquaculture” (AQUACULTURE 2024)

Annotation

BIO Web Conf.

Keywords

Article Number 03025 Number of page(s) 9 Section Aquaculture Education, Environmental Economics and Policy DOI https://doi.org/10.1051/bioconf/202413803025 Published online 14 November 2024 BIO Web of Conferences 138, 03025 (2024)

The name of the journal

BIO Web Conf.

URL

https://www.bio-conferences.org/articles/bioconf/abs/2024/57/bioconf_aquaculture24_03025/bioconf_aquaculture24_03025.html

Please use this ID to quote from or refer to the card

https://repository.kpfu.ru/eng/?p_id=306896&p_lang=2

Resource files

File name	Size (MB)	Format
F_bioconf_aquaculture24_03025__1_.pdf	0,26	pdf	show / download

Full metadata record

Field DC	Value	Language
dc.contributor.author	Valiev Marat Rinadovich	ru_RU
dc.date.accessioned	2024-01-01T00:00:00Z	ru_RU
dc.date.available	2024-01-01T00:00:00Z	ru_RU
dc.date.issued	2024	ru_RU
dc.identifier.citation	Designing a system call analyser for system calls used inside Linux containers. BIO Web Conf. Volume 138, 2024 International Scientific and Practical Conference “Development and Modern Problems of Aquaculture” (AQUACULTURE 2024)	ru_RU
dc.identifier.uri	https://repository.kpfu.ru/eng/?p_id=306896&p_lang=2	ru_RU
dc.description.abstract	BIO Web Conf.	ru_RU
dc.description.abstract	This paper examines the development of a system call analyzer used within Linux containers, aiming to ensure security and enhance the performance of containerized applications. Containerization has become a vital aspect of modern software development and operations, enabling efficient isolation of applications and their dependencies. However, selecting a reliable image and analyzing vulnerabilities remain crucial tasks. The focus is on utilizing the ptrace system call and Berkeley Packet Filter technology to monitor and analyze system calls within containers. The developed system call detector interacts with the operating system kernel and the Podman container management tool, ensuring interception and filtration of system calls with minimal impact on container performance. The system's architecture comprises a detector, server, and client components, ensuring modularity, testability, extensibility, and flexible development. The server component processes requests from clients and detectors, manages data, and provides appropriate responses. The client component is a web interface for system interaction. The paper also discusses the functional and non-functional requirements of the system, the implementation tools in Go and JavaScript languages using ReactJS and TypeScript libraries, and the advantages of a multi-layered architecture. The developed system call analyzer contributes to the improved security and performance of containerized applications, as evidenced by testing and system operation results.	ru_RU
dc.language.iso	ru	ru_RU
dc.subject	Article Number 03025 Number of page(s) 9 Section Aquaculture Education	ru_RU
dc.subject	Environmental Economics and Policy DOI https://doi.org/10.1051/bioconf/202413803025 Published online 14 November 2024 BIO Web of Conferences 138	ru_RU
dc.subject	03025 (2024)	ru_RU
dc.title	Designing a system call analyser for system calls used inside Linux containers.	ru_RU
dc.type	Articles in Russian journals and collections	ru_RU