一句话：提出 KIT，用于检测 OS 级虚拟化中导致容器隔离失效的功能干扰缺陷。
容器隔离依赖 Linux namespaces 等 OS 级虚拟化机制，但这些机制极难正确实现，实践中存在功能干扰缺陷，严重威胁容器安全。此类缺陷通常不引发内存错误或崩溃，而是隐蔽的逻辑错误，会静默产生语义上错误的结果，使攻击者能从同一机器上的其他容器提取信息，或通过修改未被正确隔离的内核资源破坏其完整性。尽管影响严重，功能干扰缺陷因难以检测而关注有限。论文提出 KIT，标题表明其用于测试 OS 级虚拟化以发现这类缺陷。摘要未给出具体方法、技术细节与实验评估结果。
Container isolation is implemented through OS-level virtualization, such as Linux namespaces. Unfortunately, these mechanisms are extremely challenging to implement correctly and, in practice, suffer from functional interference bugs, which compromise container security. In particular, functional interference bugs allow an attacker to extract information from another container running on the same machine or impact its integrity by modifying kernel resources that are incorrectly isolated. Despite their impact, functional interference bugs in OS-level virtualization have received limited attention in part due to the challenges in detecting them. Instead of causing memory errors or crashes, many functional interference bugs involve hard-to-catch logic errors that silently produce semantically incorrect results.