Apiary: Easy-to-Use Desktop Application Fault Containment on Commodity Operating Systems
Improving Host Security with System Call Policies