The present invention provides a method apparatus for recognizing a process in a guest operation system by a virtual machine monitor, and the method comprises: step 101 of recording by the virtual machine monitor the page table information of a process to be executed upon process switching of the guest operating system; step 102 of acquiring by the virtual machine monitor the identification information of the currently-executed process; step 103 of storing by the virtual machine monitor the correspondence between the previously recorded page table information of the process to be executed and the identification information of the currently-executed process. By storing the correspondence between the process page directory base address and the identification information of the process, the method and apparatus of the present invention enable the virtual machine monitor to locate and monitor processes executed in the GOS, thus promoting the management granularity on GOS of the virtual machine monitor to a process level.