Adoption and accuracy of automated Seccomp filter generation tools

Investigate the real-world adoption rates and accuracy of automated Seccomp filter generation tools for Linux applications, assessing how frequently developers use such tools and how precisely the generated filters match the actual system call requirements.

Background

The paper references multiple academic and open-source efforts to automate Seccomp filter generation, indicating interest in tooling that assists developers in constructing syscall whitelists.

Despite these developments, the authors explicitly state that there is no empirical data about the adoption and accuracy of such tools, underscoring an unresolved question about their practical effectiveness and uptake.