SoK: Introspections on Trust and the Semantic Gap
Geiger: monitoring the buffer cache in a virtual machine environment