Enhancing Security and Privacy of Tor's Ecosystem by Using Trusted Execution Environments
Iago attacks: why the system call API is a bad untrusted RPC interface