Graphene-SGX: a practical library OS for unmodified applications on SGX
Iago attacks: why the system call API is a bad untrusted RPC interface