Fig. 11From: Optimus: association-based dynamic system call filtering for container attack surface reductionMeasurements on the number of system call invocations and moving averages for estimating the completion of container initializationBack to article page