Shielding Applications from an Untrusted Cloud with Haven
Splitting interfaces: making trust between applications and operating systems configurable