Design of the EROS Trusted Window System. - Jonathan S. Shapiro; John Vanderburgh; Eric Northup; David Chizmadia (USENIX Security Symposium, 2004)