Quantifying and Reducing Kernel Attack Surface (2014) [pdf] | Hacker News Reader