{ACES}: Automatic Compartments for Embedded Systems
Nested Kernel: An Operating System Architecture for Intra-Kernel Privilege Separation