A Flexible Containment Mechanism for Executing Untrusted Code. - David S. Peterson; Matt Bishop; Raju Pandey (USENIX Security Symposium, 2002)