Kurniadi Asrigo Lionel Litty David Lie Using VMM-based sensors to monitor honeypots. 13-23 2006 conf/vee/2006 VEE http://doi.acm.org/10.1145/1134760.1134765 db/conf/vee/vee2006.html#AsrigoLL06