System call intercepting is a common trick used in networking to extend or add new features and is commonly used by kernel emulators (user mode linux, or gvisor) and network libraries which offer replacement or extra massaging of for example socket API. The one big advantage provided by such schemes eg using LD_PRELOAD is you dont have to modify the application code.

Hajime Tazaki and Kenichi Yasukata look a the history of this syscall hook approach, how the functionalirt has been improved over time. They will discuss outstanding challenges and how we can move forward in future to make this area even more appealing.

cheers, jamal