Hardware-assisted rootkits: abusing performance counters on the ARM and x86 architectures
Hypervision Across Worlds: Real-time Kernel Protection from the ARM TrustZone Secure World