{"id":"W4385993975","doi":"10.1145/3609021.3609301","title":"Unleashing Unprivileged eBPF Potential with Dynamic Sandboxing","year":2023,"lang":"en","type":"article","venue":"","topic":"Security and Verification in Computing","field":"Computer Science","cited_by":14,"is_retracted":false,"has_abstract":true,"ca_institutions":"University of British Columbia","funders":"Natural Sciences and Engineering Research Council of Canada; National Science Foundation","keywords":"Computer science; Exploit; Overhead (engineering); Kernel (algebra); Scope (computer science); Linux kernel; Operating system; Software; System call; Computer security; Programming language","routes":{"ca_aff":true,"ca_fund":true,"ca_venue":false,"about_ca":false,"invisible_to_affiliation_only":false},"retraction":null,"screen":null,"direct_labels":[],"prediction":{"model_version":"codex-gemma-dda1882f352a","candidate_categories":[],"consensus_categories":[],"category_scores_codex":[0.0003157593,0.0000956088,0.00009118652,0.0001344389,0.000278018,0.000273374,0.0006525733,0.00003763542,0.00002231898],"category_scores_gemma":[0.00002101024,0.00008117177,0.00003476368,0.0009143395,0.00002669272,0.0003890343,0.0002245024,0.0001282048,0.0002308089],"about_ca_system_candidate":false,"about_ca_system_consensus":false,"about_ca_system_score_codex":0.00002839692,"about_ca_system_score_gemma":0.0000483497,"about_ca_topic_candidate":false,"about_ca_topic_consensus":false,"about_ca_topic_score_codex":0.00001859705,"about_ca_topic_score_gemma":0.00001174101,"domain_scores_codex":[0.9989278,0.00004202679,0.0001500205,0.0003425873,0.0002626768,0.0002749254],"domain_scores_gemma":[0.9993414,0.00008210488,0.00005455864,0.0004074101,0.00004984611,0.00006469846],"domain_codex":null,"domain_gemma":null,"domain_candidate":null,"domain_consensus":null,"study_design_codex":"theoretical_or_conceptual","study_design_gemma":"simulation_or_modeling","study_design_scores_codex":[0.00003982918,0.0001834102,0.004119512,0.0001382365,0.0001696161,0.0003790449,0.009800344,0.05800541,0.02186061,0.6852758,0.006537099,0.2134911],"study_design_scores_gemma":[0.0002423433,0.00002698683,0.005477022,0.00003034572,0.000002960744,0.0000293823,0.0001606245,0.9900894,0.00086884,0.001933415,0.000962048,0.0001765973],"study_design_candidate":"simulation_or_modeling","study_design_consensus":null,"genre_codex":"methods","genre_gemma":"empirical","genre_scores_codex":[0.1195194,0.00001542335,0.8749541,0.001301778,0.000365001,0.00007186925,3.302332e-7,0.001101757,0.002670313],"genre_scores_gemma":[0.9643327,0.000006186819,0.03498834,0.0002189914,0.00005318576,0.000004691746,0.000003610242,0.000008273115,0.000384009],"genre_candidate":"empirical","genre_consensus":null,"teacher_disagreement_score":0.932084,"threshold_uncertainty_score":0.3310089,"prediction_status":"machine_predicted_unvalidated"},"machine_scores":{"provisional":true,"baseline":true,"maturity_gate_passed":false,"score_opus":0.00930250154796204,"score_gpt":0.2341999422711614,"score_spread":0.2248974407231994,"validation_status":"score_only:v0-immature-baseline","note":"Baseline scores from an immature model (maturity gate not passed). Scores rank; they never assert a category."}}