Using memory management to detect and extract illegitimate code for malware analysis - Willems, Carsten 1975-; Freiling, Felix C. (2012)