Invention Grant
- Patent Title: System and method for protection of memory in a hypervisor
- Patent Title (中): 管理程序中的内存保护系统和方法
-
Application No.: US14935852Application Date: 2015-11-09
-
Publication No.: US09536088B1Publication Date: 2017-01-03
- Inventor: Nikolay N. Igotti , Mikhail A. Ershov
- Applicant: AO Kaspersky Lab
- Applicant Address: RU Moscow
- Assignee: AO Kaspersky Lab
- Current Assignee: AO Kaspersky Lab
- Current Assignee Address: RU Moscow
- Agency: Arent Fox LLP
- Agent Michael Fainberg
- Main IPC: G06F12/14
- IPC: G06F12/14 ; G06F21/56 ; G06F9/455

Abstract:
Disclosed are systems and methods for enabling secure execution of code in hypervisor mode. An exemplary method comprises: loading a hypervisor configured to check integrity of protected virtual memory pages; loading a trusted program configured to make hypercalls to the hypervisor; making by the trusted program a first hypercall to the hypervisor; responsive to the first hypercall, generating by the hypervisor a token, which is used by the hypervisor to identify the trusted program during subsequent hypercalls; allocating a memory page for storing the token and a memory address of the hypervisor; and returning the allocated memory page address to the trusted program.
Information query