1. A system comprising: a central processing unit (CPU) adapted to execute a process, a single instance of an operating system kernel, a virtual machine monitor (VMM) and a microvisor; a memory configured to store the process, the operating system kernel, the VMM and the microvisor as a micro-virtualization architecture that organizes the memory as a user space and a kernel space, wherein the process, the operating system kernel and the VMM execute in the user space of the architecture, and wherein the microvisor executes in the kernel space of the architecture; the microvisor disposed beneath the operating system kernel and configured to communicate with the VMM over a privileged interface, the microvisor further configured to execute at a highest privilege level of the CPU to control access permissions to a plurality of kernel resources accessible by the process; and the VMM configured to execute at a highest privilege level of the microvisor to perform a one-to-one mapping between the plurality of kernel resources and the operating system kernel and to expose the mapped kernel resources to the operating system kernel, the operating system kernel configured to execute at a privilege level lower than the highest privilege level of the microvisor, the VMM configured to instantiate a virtual machine containing the operating system kernel, the VMM further configured to instantiate a micro-virtual machine restricted to containing the process, wherein access to the mapped kernel resources is controlled by the VMM among the virtual machine and the micro-virtual machine.