公开(公告)号：EP2115570B1

公开(公告)日：2018-06-13

申请号：EP07869154.0

申请日：2007-12-12

申请人： Microsoft Technology Licensing, LLC

发明人： TRAUT, Eric ,  FOLTZ, Forrest ,  THORNTON, Andrew ,  SINHA, Suyash

IPC分类号： G06F12/14 ,  G06F9/455 ,  G06F21/55

CPC分类号： G06F12/1491 ,  G06F9/45533 ,  G06F21/554

摘要： This document describes tools capable of making a portion of operating-system memory associated with a protection agent unalterable or inaccessible from an operating-system privilege mode. In some embodiments, these tools are capable of creating a protection-agent privilege mode by requesting that a virtual machine monitor protect this portion of operating-system memory. In other embodiments, these tools are capable of creating the protection-agent privilege mode by virtualizing a physical processor into multiple virtual processors, at least one of which is a protection-agent virtual processor designed to run the protection agent. By making this portion of operating-system memory unalterable or inaccessible from the operating-system privilege mode, the protection agent may be less vulnerable to attacks by entities operating within the operating-system privilege mode.