http://dl.acm.org/citation.cfm?id=2342458
an abstraction that supports programming isolated slices of the network
virtual LANs (VLANs) provide a way to separate the processing of different classes of packets in the network; special-purpose devices such as firewalls prevent packets from flowing onto certain segments of the network; and systems such as Flowvisor [16] allow multiple programs to control an OpenFlow [11] net- work without interfering with each other
isolation should be provided at the language level
make the case for treating isolation at the language level, using examples inspired by common network scenarios