Some research is funded by a DARPA seedling under contract #MDA972-03-P-0015, and was initially funded under contract #FA8750-04-1-0090.

Some publications are based upon work supported by the National Science Foundation under Grant No. ANI-0225660.

Some publications are based upon work supported by the National Science Foundation under Grant No. CCR-0093361.

Some research was funded by the DARPA Composable High Assurance Trusted Systems program (BAA #01-24), under contract #N66001-01-1-8927.

David Mazières is partially supported by Alfred P. Sloan research fellowship No. BR 4169.

Any opinions, findings, and conclusions or recommendations expressed in publications arising from this research are those of the author(s) and do not necessarily reflect the views of the National Science Foundation or any other funding agency.