InkTag: secure applications on an untrusted operating system
Iago attacks: why the system call API is a bad untrusted RPC interface