PROTECTION AGENTS AND PRIVILEGE MODES

    公开(公告)号:EP2115570B1

    公开(公告)日:2018-06-13

    申请号:EP07869154.0

    申请日:2007-12-12

    IPC分类号: G06F12/14 G06F9/455 G06F21/55

    摘要: This document describes tools capable of making a portion of operating-system memory associated with a protection agent unalterable or inaccessible from an operating-system privilege mode. In some embodiments, these tools are capable of creating a protection-agent privilege mode by requesting that a virtual machine monitor protect this portion of operating-system memory. In other embodiments, these tools are capable of creating the protection-agent privilege mode by virtualizing a physical processor into multiple virtual processors, at least one of which is a protection-agent virtual processor designed to run the protection agent. By making this portion of operating-system memory unalterable or inaccessible from the operating-system privilege mode, the protection agent may be less vulnerable to attacks by entities operating within the operating-system privilege mode.