Justin Cappos Armon Dadgar Jeff Rasley Justin Samuel Ivan Beschastnikh Cosmin Barsan Arvind Krishnamurthy Thomas E. Anderson Retaining sandbox containment despite bugs in privileged memory-safe code. 212-223 2010 ACM Conference on Computer and Communications Security http://doi.acm.org/10.1145/1866307.1866332 conf/ccs/2010 db/conf/ccs/ccs2010.html#CapposDRSBBKA10