Margo I. Seltzer Yasuhiro Endo Christopher Small Keith A. Smith Dealing with Disaster: Surviving Misbehaved Kernel Extensions. 213-227 1996 OSDI db/conf/osdi/osdi96.html#SeltzerESS96