A Theory and Tools for Applying Sandboxes Effectively
Design and Verification of Secure Systems