Below we can see how ASM's socket_connect hook behaves.
Every LSM hook implemented in ASM (e.g., socket_connect, kill_background_processes) follows the same logic seen in this image. The dashed boxes represent the modules that differ between hooks, i.e., for the kill_background_processes hook we would have asm_kill_background_processes(…) instead of asm_socket_create(…) in the asm_lsm.c file, and kill_background_processes(…) instead of socket_create(…) in the ASMService class.