A Virtual Machine Introspection Based Architecture for Intrusion Detection,” in (2003)

by T Garfinkel, M Rosenblum
Venue:Proc. Symp. Network and Distributed System Security,