A computing device, comprising a processor and a non-transitory machine-readable storage medium encoded with instructions executable by the processor, the non-transitory storage medium comprising instructions to: load an inner portion (330, 430) of an operating system kernel in an inner region of a kernel space (310, 410); characterized in that the non-transitory storage medium further comprises instructions to: load (220; 221, 222) a set of outer portions (335, 435) of the operating system kernel in an outer region of the kernel space (310, 410); and execute (230; 231, 232) a service in a container (340, 440) of a set of containers in a user space, wherein each container (340, 440) is communicatively coupled with an outer portion of the set of outer portions (335, 435) of the operating system kernel, and wherein each container (340, 440) is divided from the inner portion (330, 430) of the operating system kernel and each container (340, 440) is isolated from all other containers (340, 440) in the set of containers; in response to detecting an attack on one of containers (340, 440), the corresponding service, or the corresponding outer portion of the operating system kernel, take remedial action on the attacked container (340, 440), service, or outer portion of the operating system kernel, wherein the other containers (340, 440), services, and outer portions of the operating system kernel are unaffected. load an inner portion (330, 430) of an operating system kernel in an inner region of a kernel space (310, 410); characterized in that the non-transitory storage medium further comprises instructions to: load (220; 221, 222) a set of outer portions (335, 435) of the operating system kernel in an outer region of the kernel space (310, 410); and execute (230; 231, 232) a service in a container (340, 440) of a set of containers in a user space, wherein each container (340, 440) is communicatively coupled with an outer portion of the set of outer portions (335, 435) of the operating system kernel, and wherein each container (340, 440) is divided from the inner portion (330, 430) of the operating system kernel and each container (340, 440) is isolated from all other containers (340, 440) in the set of containers; load (220; 221, 222) a set of outer portions (335, 435) of the operating system kernel in an outer region of the kernel space (310, 410); and execute (230; 231, 232) a service in a container (340, 440) of a set of containers in a user space, wherein each container (340, 440) is communicatively coupled with an outer portion of the set of outer portions (335, 435) of the operating system kernel, and wherein each container (340, 440) is divided from the inner portion (330, 430) of the operating system kernel and each container (340, 440) is isolated from all other containers (340, 440) in the set of containers; in response to detecting an attack on one of containers (340, 440), the corresponding service, or the corresponding outer portion of the operating system kernel, take remedial action on the attacked container (340, 440), service, or outer portion of the operating system kernel, wherein the other containers (340, 440), services, and outer portions of the operating system kernel are unaffected.