A virtual machine introspection based architecture for intrusion detection (2003)

by Tal Garfinkel, Mendel Rosenblum
Venue:In Proceedings of the Internet Society’s 2003 Symposium on Network and Distributed System Security (NDSS ’03