Tolerating malicious device drivers in Linux
Decaf: Moving Device Drivers to a Modern Language