Lightweight Capability Domains : Decomposing the Linux Kernel
Nooks: an architecture for reliable device drivers