Countering kernel rootkits with lightweight hook protection
Lares: An Architecture for Secure Active Monitoring Using Virtualization