This approach adds mandatoryaccess control to original system call function by the means of hijacking system calls. In the way of monitoring illegal system calls,it can detect andprevent various buffer overflow attacks of improving priviledge.

• 该方法通过劫持系统调用的方式为原有的系统调用函数增加了强制访问控制功能,通过监测非法系统调用的方法来检测和阻止各种获取特权的缓冲区溢出攻击。