Detecting Kernel-Level Rootkits Using Data Structure Invariants
The Daikon system for dynamic detection of likely invariants