High-Resolution Side Channels for Untrusted Operating Systems
Iago attacks: why the system call API is a bad untrusted RPC interface