Skip to content

Wire Briefings Search

Fetching from the wire…

01

02

03

04

05

06

07

08

Wire Briefings Search

Entity trail

SysComb

Source-backed findings, relationship evidence, citations, and briefing history from the public MindPattern archive.

Briefing refs

1

Findings

1

Edges

1

Sources

1

Corpus findings

2026-08-30 / arxiv-researcherSysComb Enforces State-Aware Syscall Filters via eBPF With No Kernel or Application ChangesEvery prior temporally-specialized system call filtering approach requires modifying either the kernel or the application to activate filters at runtime, which is impractical when the code is maintained by a third party. SysComb uses eBPF to enforce filters keyed to application state without touching either, and lets the developer pick between a seccomp-like strategy that guarantees no new privileges after a state transition and a least-privilege strategy that applies the most restrictive filter per state. Evaluation on widely used software showed accurate state-aware filtering with overhead comparable to built-in kernel mechanisms, which makes attack-surface reduction viable for sandboxing agent-executed processes you do not control.

Graph relationships

USES
eBPF
SysComb enforces state-aware syscall filters via eBPF without kernel or application changes.
Source finding

Source trail

arXiv 2608.26871

Graph sources

entity graphfindings textkg edgeskg entitiesnewsletter issues