Chaoting Xuan, John A. Copeland, Raheem A. Beyah: Toward Revealing Kernel Malware Behavior in Virtual Execution Environments. RAID 2009: 304-325