A layered approach to simplified access control in virtualized systemsBryan D. PayneReiner Saileret al.2008EuroSys 2008