Protected subsystem A collection of procedures and data objects that is encapsulated in a domain of its own so that the internal structure of a data object is accessible only to the procedures of the ...

The protection-domain memory model allows code and data resources to be encapsulated in a protected environment.

Since Monday, version 1.0 of the operating system can be downloaded from the project’s website. Qubes OS follows a “security by isolation” design principle.