Splitting Interfaces: Making Trust Between Applications and Operating Systems Configurable. - Richard Ta-Min; Lionel Litty; David Lie (OSDI, 2006)