摘要 |
Zone breakout detection is disclosed. A system call is monitored. It is determined if the system call stays within a zone in which a process associated with the system call was started. If it is determined the system call does not stay within the zone in which the process associated with the system call was started, appropriate action is taken. |