用错误围堵策略建立可生存的网络安全设备内核

• Utilizing Fault Containment to Construct a Survivable Network Security Device Kernel