Systrace

Interactive policy generation.
Quick and easy generation of policy during program execution.
Notification for every system call not covered by current policy.

Intrusion detection.
Once policy has been generated, any operation not covered by policy indicates a security problem.

Automatic Policy Generation.
Records all system calls an application executes and generates policy to cover them.