Now You See Me: Hide and Seek in Physical Address Space
afrl - osr - va - tr - 2013 - 0439 autonomic recovery : hypercheck : a hardware - assisted integrity monitor .