"Iago attacks: why the system call API is a bad untrusted RPC interface."

Stephen Checkoway, Hovav Shacham (2013)
a service of Schloss Dagstuhl - Leibniz Center for Informatics