Vx32: Lightweight User-level Sandboxing on the x86
Improving Host Security with System Call Policies