KI-Mon ARM: A Hardware-Assisted Event-triggered Monitoring Platform for Mutable Kernel Object
Detecting Kernel-Level Rootkits Using Data Structure Invariants