Nooks [Swift et al, ACM Trans. Computer Systems, 23:77-110, 2005] protects the kernel from buggy device … [in] a lightweight protection domain … When a driver runs, all pages outside it … When the kernel … calls a driver function or [vice-versa], … a wrapper … checks the parameters for validity and manages the … [p. 46] … When a driver tries to modify a kernel … Upon successful completion of the request, the isolation …
Google-1
Google-2
Copyright clearance needed for quotation.