Tool kit for building highly secure special-purpose operating systems
...The framework provides mechanisms to let programs communicate with each other and trade their resources, but only in strictly-defined manners. Thanks to this rigid regime, the attacksurface of security-critical functions can be reduced by orders of magnitude compared to contemporary operating systems.