Halvar Flake: Why Johnny can’t tell if he is compromised
Running Applications on the NetBSD Rump Kernel by Justin Cormack