Fig. 1From: Optimus: association-based dynamic system call filtering for container attack surface reductionOverall architecture of Optimus with three main components: the container manager, system call monitor, and profile generatorBack to article page