If you haven't seen his original paper regarding this it can be found here: http://demoseen.com/bhpaper.html

Also, slides for his talk at Blackhat: http://demoseen.com/bhtalk2.pdf