1. A system comprising: a computer processor; an operating system kernel configured to execute on the computer processor; and a mediator configured to execute on the computer processor and to operate between the operating system kernel and a data processing application, the mediator to control access of user-related application state of the data processing application and to restrict access of the operating system kernel to the user-related application state; wherein the operating system kernel is modified to remove a portion of its functionality to the mediator; and wherein the mediator has higher access rights than the operating system kernel to the computer processor and the data processing resources.