1. A method, comprising: managing an operating system execution environment comprising a first user mode and a first kernel mode; executing a single operating system in the first kernel mode, the executing the single operating system comprising providing one or more operating system services of the single operating system to one or more processes of the first kernel mode; managing a secure execution environment comprising a second user mode and a second kernel mode; executing an isolated process within the second user mode of the secure execution environment; providing the one or more operating system services of the single operating system executing in the first kernel mode to the isolated process via the second kernel mode; and protecting the isolated process from an attack from the one or more operating system services by disabling access by the first user mode and the first kernel mode to one or more pages of memory.