This approach adds mandatoryaccess control to original system call function by the means of hijacking system calls. In the way of monitoring illegal system calls,it can detect andprevent various buffer overflow attacks of improving priviledge.