1. A method, comprising: managing an operating system execution environment comprising a first user mode and a first kernel mode; managing a secure execution environment comprising a second user mode and a second kernel mode; executing an isolated process within the second user mode of the secure execution environment; providing one or more system services of the first kernel mode to the isolated process via the second kernel mode; and protecting the isolated process from an attack from the system services by disabling access by the first user mode and the first kernel mode to one or more pages of memory.