Configuring a kernel to use an allow or deny list to filter kernel api calls.
https://d3fend.mitre.org/technique/d3f:SystemCallFiltering/