SIGDROP: Signature-based ROP Detection using Hardware Performance Counters
Reusing Hardware Performance Counters to Detect and Identify Kernel Control-Flow Modifying Rootkits