KI-Mon ARM: A Hardware-Assisted Event-triggered Monitoring Platform for Mutable Kernel Object
Copilot - a coprocessor-based kernel runtime integrity monitor