Undertow: An Intra-Kernel Isolation Mechanism for Hardware-Assisted Virtual Machines | IEEE Conference Publication | IEEE Xplore