One of these magics was, on nearly every platform, to provide its own declarations for every library function and system call it planned to use, rather than including the standard headers.
其中最奇妙的事情之一是，在几乎每个平台上都为计划要处理的每个库函数和系统调用都提供自己的声明，而不是包括标准的头文件。
In terms of the way it is called, there is no difference between a system call and a library function.
就调用方式而言，系统调用与库函数之间没有区别。
An example of a library function that does have an associated system call is the fopen function declared in stdio.h.
有相关系统调用的库函数的一个示例是stdio . h中声明的fopen函数。
An example of a library function that does not have an associated system call is the strlen function declared in string.h.
没有相关系统调用的库函数的一个示例是string . h中声明的strlen函数。
System call probes, or syscall probes, are probes used to probe functions in the libc library as well as the kenel.
系统调用探测（即syscall 探测）用来探测libc库和内核中的函数。
Library call signatures are more application oriented than system call signatures. Library call signatures can be used to detect attacks that cause perturbation in the application code.
语言库调用特征比系统调用特征更能直接地反映应用级的代码。
Library call signatures are more application oriented than system call signatures. Library call signatures can be used to detect attacks that cause perturbation in the application code.
语言库调用特征比系统调用特征更能直接地反映应用级的代码。
应用推荐