公开(公告)号：WO2009144602A1

公开(公告)日：2009-12-03

申请号：PCT/IB2009/051682

申请日：2009-04-24

Applicant: INTERNATIONAL BUSINESS MACHINES CORPORATION ,  CARBONE, Martim ,  JANSEN, Bernhard ,  RAMASAMY, HariGovind V. ,  SCHUNTER, Matthias ,  TANNER, Axel ,  ZAMBONI, Diego

Inventor： CARBONE, Martim ,  JANSEN, Bernhard ,  RAMASAMY, HariGovind V. ,  SCHUNTER, Matthias ,  TANNER, Axel ,  ZAMBONI, Diego

IPC: G06F21/00

CPC classification number: G06F21/53 ,  G06F9/45541 ,  G06F9/45558 ,  G06F2009/45587

Abstract: Avirtualization layer is inserted between (i) an operating system of a computer system, and (ii) at least one ofa memory module and a storage module of thecomputer system. At least one ofread access and write access to at least one portion of theat least one of a memory module and a storage moduleis controlled, with thevirtualization layer. The insertion ofthe virtualization layer is accomplished in an on-the-fly manner (that is, without rebooting the computer system). An additional aspect includes controlling installation of a security program from the virtualization layer.

Abstract translation: 虚拟化层插入在（i）计算机系统的操作系统之间，和（ii）计算机系统的存储器模块和存储模块中的至少一个。 存储模块和存储模块中的至少一个的至少一部分的至少一个访问和写入访问与虚拟化层一起被控制。 虚拟化层的插入是以动态方式实现的（即，不重新启动计算机系统）。 另一方面包括控制来自虚拟化层的安全程序的安装。