Virtual ghost: protecting applications from hostile operating systems
Implementing an untrusted operating system on trusted hardware