Virtualization-based separation of privilege: working with sensitive data in untrusted environment. - Igor B. Burdonov; Alexander S. Kosachev; Pavel Iakovenko (VDTS@EuroSys, 2009)