Nested Kernel: An Operating System Architecture for Intra-Kernel Privilege Separation
InkTag: secure applications on an untrusted operating system