Detecting (and creating !) a HVM rootkit (aka BluePill-like)
SubVirt: implementing malware with virtual machines