Title: Splitting interfaces: Making trust between applications and operating systems configurable
First published: 2006