KI-Mon ARM: A Hardware-Assisted Event-triggered Monitoring Platform for Mutable Kernel Object
afrl - osr - va - tr - 2013 - 0439 autonomic recovery : hypercheck : a hardware - assisted integrity monitor .