TZ-KPM:Kernel Protection Mechanism on Embedded Devices on Hardware-Assisted Isolated Environment | IEEE Conference Publication | IEEE Xplore