A Virtual Machine Introspection Based Architecture for Intrusion Detection (2003)

by Tal Garfinkel, Mendel Rosenblum
Venue:In Proc. Network and Distributed Systems Security Symposium