Trellis: Privilege Separation for Multi-user Applications Made Easy
RockSalt: better, faster, stronger SFI for the x86