Application-Level Isolation and Recovery with Solitude

Shvetank Jain, Fareha Shafique, Vladan Djeric, Ashvin Goel

Department of Electrical and Computer Engineering, University of Toronto

http://portal.acm.org/citation.cfm?id=1357010.1352603

引入一个新的文件系统层(Isolation File System)将安全可信的基础文件系统和不可信的环境（如网上下载的文件等）隔离开来，并对不可信的环境中做出的改动加以记录，一旦发现问题就能即使恢复。