True IOMMU Protection from DMA Attacks: When Copy is Faster than Zero Copy
Tolerating malicious device drivers in Linux