Fig. 2From: Iso-UniK: lightweight multi-process unikernel through memory protection keysIsolation between Sandboxes. Uses page table for inter-sandbox isolation. “PT” means page table, “Rrc” means resourcesBack to article page