Iago attacks: why the system call API is a bad untrusted RPC interface
Overshadow: a virtualization-based approach to retrofitting protection in commodity operating systems