Sub-Operating Systems: A New Approach to Application Security
by Ioannidis, Bellovin and Smith
in SIGOPS European Workshop '02
Context: Operating System Structure, Security