Kernel-based Process Isolation