Complex event processing for reactive security monitoring in virtualized computer systems
A Virtual Machine Introspection Based Architecture for Intrusion Detection