Dynamic Virtual Address Range Adjustment for Intra-Level Privilege Separation on ARM
Taming Hosted Hypervisors with (Mostly) Deprivileged Execution.