Countering kernel rootkits with lightweight hook protection
Return-Oriented Rootkits: Bypassing Kernel Code Integrity Protection Mechanisms