FOUNDATIONS OF TRUSTED SYSTEMS · Captaru