afrl - osr - va - tr - 2013 - 0439 autonomic recovery : hypercheck : a hardware - assisted integrity monitor .
Copilot - a coprocessor-based kernel runtime integrity monitor