A security policy oracle: detecting security holes using multiple API implementations
Thorough static analysis of device drivers