RedLeaf: Isolation and Communication in a Safe Operating System | USENIX
www.usenix.org