Secure Abstraction with Code Capabilities. - Robbert van Renesse; Håvard D. Johansen; Nihar Naigaonkar; Dag Johansen (PDP, 2013)