Iago attacks: why the system call API is a bad untrusted RPC interface.

Stephen Checkoway, Hovav Shacham

Browse the full ASPLOS paper archive.