Detecting and Preventing Kernel Rootkit Attacks with Bus Snooping
A Virtual Machine Introspection Based Architecture for Intrusion Detection