BoundShield: Comprehensive Mitigation for Memory Disclosure Attacks via Secret Region Isolation
kR^X: Comprehensive Kernel Protection against Just-In-Time Code Reuse