@inproceedings{LittySecurity08, author = "Lionel Litty and H. Andr\'es Lagar-Cavilla and David Lie", title = "{Hypervisor Support for Identifying Covertly Executing Binaries}", booktitle = "{Proc. 17th Usenix Security Symposium}", address = "{San Jose, CA}", month = jul, year = 2008 }