@string{ACM = "Association for Computing Machinery"}
@string{ACMabbr = "{ACM}"}
@string{IEEEabbr = "{IEEE}"}
@string{ASPLOS = "{I}nternational {C}onference on {A}rchitectural {S}upport for {P}rogramming {L}anguages and {O}perating {S}ystems"}
@string{COLLABORATECOM = "International Conference on Collaborative Computing"}
@string{SOSP = ACMabbr # " {S}ymposium on {O}perating {S}ystems {P}rinciples"}
@string{OSDI = "{USENIX} {S}ymposium on {O}perating {S}ystems {D}esign and {I}mplementation"}
@string{ISOC = "Internet Society"}
@string{NDSS = "Network and Distributed System Security Symposium"}
@string{EUROSYS = ACMabbr # " {SIGOPS} {E}uro{S}ys"}
@string{TSE = "Transactions on Software Engineering"}
@string{SECURITY = "USENIX Security Symposium"}

@InProceedings{chen08:_overs,
  author =       {Xiaoxin Chen and Tal Garfinkel and E. Christopher
                  Lewis and Pratap Subrahmanyam and Carl
                  A. Waldspurger and Dan Boneh and Jeffrey Dwoskin and
                  Dan R. K. Ports},
  title =        {Overshadow: A Virtualization-Based
                  Approach to Retrofitting Protection in Commodity
                  Operating Systems},
  crossref =  {asplos08}}

@inproceedings{eros,
    author = {Jonathan S. Shapiro and Jonathan M. Smith and David
    J. Farber},
    title = {{EROS: A Fast Capability System}},
    booktitle = {{Proceedings of the Seventeenth ACM Symposium on Operating Systems Principles}},
    month = {December},
    year = {1999},
    isbn = {1-58113-140-2},
    pages = {170--185},
    location = {Charleston, South Carolina, United States},
    doi = {http://doi.acm.org/10.1145/319151.319163},
    ignore-publisher = {ACM Press},
    ignore-address = {New York, NY, USA},
}

@InProceedings{haertig05:_nizza_secur_system_archit,
  author =       {Hermann H\"artig and Michael Hohmuth and Norman
                  Feske and Christian Helmuth and Adam Lackorzynski
                  and Frank Mehnert and Michael Peter},
  title =        {The {Nizza} Secure-System Architecture},
  crossref =  {collaboratecom05},
  annote =    {Strategy for reducing the trusted computing base of
                  legacy applications: run them on a microkernel with
                  a kernelized legacy OS, and separate out the
                  security-sensitive portions (e.g. crypto) into a
                  separate application running atop the hypervisor.}
}

@InProceedings{lie00:_archit_suppor_for_copy_and,
  author =       {David Lie and Chandramohan Thekkath and Mark
                  Mitchell and Patric Lincoln and Daniel Boneh and
                  John Mitchell and Mark Horowitz},
  title =        {Architectural Support for Copy and Tamper Resistant
                  Software},
  crossref =  {asplos00}
}

@InProceedings{lie03:_implem_untrus_operat_system_trust_hardw,
  author =       {David Lie and Chandramohan Thekkath and Mark
                  Horowitz},
  title =        {Implementating an Untrusted Operating System on
                  Trusted Hardware},
  crossref =  {sosp03}
}

@InProceedings{garfinkel03:_terra,
  author =       {Tal Garfinkel and Ben Pfaff and Jim Chow and Mendel
                  Rosenblum and Dan Boneh},
  title =        {Terra: A Virtual Machine-Based Platform for Trusted
                  Computing},
  crossref =  {sosp03}
}

@InProceedings{ta-min06:_split_inter,
  author =       {Richard Ta-Min and Lionel Litty and David Lie},
  title =        {Splitting Interfaces: Making Trust Between
                  Applications and Operating Systems Configurable},
  crossref =  {osdi06}
}

@InProceedings{weinhold08:_vpfs,
  author =       {Carsten Weinhold and Hermann H{\"a}rtig},
  title =        {{VPFS}: Building a Virtual Private File System with
                  a Small Trusted Computing Base},
  crossref =  {eurosys08},
}

@InProceedings{li04:_secur_untrus_data_repos_sundr,
  author =       {Jinyuan Li and Maxwell Krohn and David Mazi{\`e}res
                  and Dennis Shasha},
  title =        {Secure Untrusted Data Repository ({SUNDR})},
  crossref =  {osdi04},
}

@InProceedings{goh03:_sirius,
  author =       {Eu-Jin Goh and Hovav Shacam and Nagendra Modadugu
                  and Dan Boneh},
  title =        {{SiRiUS}: Securing Remote Untrusted Storage},
  crossref =  {ndss03}
}

@InProceedings{maheshwari00:_how_to_build_trust_datab,
  author =       {Umesh Maheshwari and Radek Vingralek and William
                  Shapiro},
  title =        {How to Build a Trusted Database System on Untrusted
                  Storage},
  crossref =  {osdi00}
}

@Article{berger90:_compar_mode_works,
  author =       {Jeffrey L. Berger and Jeffrey Picciotto and John
                  P. L. Woodward and Paul T. Cummings},
  title =        {Compartmented Mode Workstation: Prototype
                  Highlights},
  journal =      TSE,
  year =         1990,
  volume =    16,
  number =    2,
  pages =     {608--618},
  month =     jun,
  annote =    {XXX}
}

@InProceedings{shapiro04:_desig_of_eros_trust_window_system,
  author =       {Jonathan S. Shapiro and John Vanderburgh and Eric
                  Northup and David Chizmadia},
  title =        {Design of the {EROS} Trusted Window System},
  crossref =  {security04},
  annote =    {XXX}
}


@Proceedings{asplos08,
  title =        "The 13th " # ASPLOS # " ({ASPLOS '08})",
  year =         2008,
  booktitle = "Proc. {ASPLOS '08}",
  address =   {Seattle, WA},
  month =     mar,
  IGNOREorganization = ACMabbr}

@Proceedings{collaboratecom05,
  title =        "The 1st " # COLLABORATECOM # " (CollaborateCom '05)",
  year =         2005,
  booktitle = "Proc. {CollaborateCom} '05",
  address =   {San Jose, CA},
  month =     dec,
  IGNOREorganization = IEEEabbr}

@Proceedings{sosp03,
  title =        "The 19th " # SOSP # " ({SOSP} '03)",
  year =         2003,
  booktitle = "Proc. {SOSP} '03",
  address =   {Bolton Landing, NY},
  month =     oct,
  IGNOREorganization = ACMabbr
}

@Proceedings{asplos00,
  title =        "The 9th " # ASPLOS # " ({ASPLOS '00})",
  year =         2000,
  booktitle = "Proc. {ASPLOS '00}",
  address =   {Cambridge, MA},
  month =     nov,
  IGNOREorganization = ACMabbr}

@Proceedings{osdi06,
  title =     "The 7th " # OSDI # " ({OSDI} '06)",
  year =         2006,
  booktitle = "Proc. {OSDI} '06",
  address =   {Seattle, WA},
  month =     nov,
  IGNOREorganization = {{USENIX}}}

@Proceedings{eurosys08,
  title =        "The 3rd " # EUROSYS # " ({EuroSys '08})",
  year =         2008,
  booktitle = "Proc. {EuroSys '08}",
  address =   {Glasgow, Scotland},
  month =     apr,
  IGNOREorganization = ACMabbr}

@Proceedings{ndss03,
  title =        "The 10th " # NDSS # " ({NDSS} '03)",
  year =         2003,
  booktitle = "Proc. {NDSS} '03",
  address =   {San Diego, CA},
  month =     feb,
  IGNOREorganization = ISOC
}

@Proceedings{osdi04,
  title =     "The 6th " # OSDI # " ({OSDI} '04)",
  year =         2004,
  booktitle = "Proc. {OSDI} '04",
  address =   {San Francisco, CA},
  month =     dec,
  IGNOREorganization = {{USENIX}}
}

@Proceedings{osdi00,
  title =     "The 4th " # OSDI # " ({OSDI} '00)",
  year =         2000,
  booktitle = "Proc. {OSDI} '00)",
  address =   {San Diego, CA},
  month =     oct,
  IGNOREorganization = {{USENIX}}
}

@Proceedings{security04,
  title =        "The 13th " # SECURITY # " (Security '04)",
  year =         2004,
  booktitle = "Proc. USENIX Security '04",
  address =   {San Diego, CA},
  month =     aug,
  IGNOREorganization = {{USENIX}}
}

@inproceedings{appcore-smaller-tcb,
     author = {Lenin Singaravelu and Calton Pu and Hermann H\"{a}rtig and Christian Helmuth},
     title = {Reducing {TCB} Complexity for Security-Sensitive Applications: Three Case Studies},
     booktitle = {Proc. EuroSys '06},
     year = {2006},
     isbn = {1-59593-322-0},
     IGNOREpages = {161--174},
     location = {Leuven, Belgium},
     doi = {http://doi.acm.org/10.1145/1217935.1217951},
     ignore-publisher = {ACM Press},
     ignore-address = {New York, NY, USA},
 }
 
@Article{england03:_trust_open_platf,
  author =       {Paul England and Butler Lampson and John Manferdelli
                  and Marcus Peinado and Bryan Willman},
  title =        {A Trusted Open Platform},
  journal =      {IEEE Spectrum},
  year =         2003,
  volume =    36,
  number =    7,
  pages =     {55--62},
  month =     jul}