Existing monitoring mechanisms on virtualized platforms either takes a
complete VM as the monitoring granularity, such that they cannot capture the malicious behaviours within
individual VMs, or they focus on specific monitoring functions that cannot be used for heterogeneous VMs
concurrently running on a single cloud node.