EXECUTING A PROTECTED DEVICE MODEL IN A VIRTUAL MACHINE
    3.
    发明申请
    EXECUTING A PROTECTED DEVICE MODEL IN A VIRTUAL MACHINE 有权
    在虚拟机中执行受保护的设备模型

    公开(公告)号:US20090089527A1

    公开(公告)日:2009-04-02

    申请号:US11864477

    申请日:2007-09-28

    IPC分类号: G06F12/14

    摘要: Embodiments of apparatuses, methods, and systems for executing a protected device model in a virtual machine are disclosed. In one embodiment, an apparatus includes recognition logic, memory management logic, control logic, and execution logic. The recognition logic is to recognize an indication, during execution of first code on a virtual machine, that the first code is attempting to access a device. The memory management logic is to prevent the virtual machine from accessing a portion of memory during execution of the first code, and to allow the virtual machine to access the portion of memory in response to the indication. The control logic is to transfer control of the apparatus from the first code to second code stored in the portion of memory, without exiting the virtual machine. The execution logic is to execute the second code to model the device.

    摘要翻译: 公开了用于在虚拟机中执行受保护设备模型的装置,方法和系统的实施例。 在一个实施例中,装置包括识别逻辑,存储器管理逻辑,控制逻辑和执行逻辑。 识别逻辑是在虚拟机上执行第一代码期间识别出第一代码尝试访问设备的指示。 存储器管理逻辑是在执行第一代码期间防止虚拟机访问存储器的一部分,并且允许虚拟机响应于指示访问存储器的一部分。 控制逻辑是将装置的控制从第一代码传送到存储在存储器部分中的第二代码,而不退出虚拟机。 执行逻辑是执行第二个代码来对设备进行建模。

    Method for resolving address space conflicts between a virtual machine monitor and a guest operating system
    6.
    发明授权
    Method for resolving address space conflicts between a virtual machine monitor and a guest operating system 失效
    解决虚拟机监视器和客户机操作系统之间的地址空间冲突的方法

    公开(公告)号:US07020738B2

    公开(公告)日:2006-03-28

    申请号:US10676737

    申请日:2003-09-30

    IPC分类号: G06F13/00

    摘要: One embodiment of the invention is method for resolving address space conflicts between a virtual machine monitor and a guest operating system. The method includes allocating an address space for the operating system and an address space for the monitor. The method also includes mapping a portion of the monitor into the address space allocated for the operating system and the address space allocated for the monitor, and locating another portion of the monitor in the address space allocated for the monitor. The method also includes detecting that the operating system attempts to access a region occupied by the portion of the monitor within the address space allocated for the operating system, and relocating that portion of the monitor within that address space to allow the operating system to access the region previously occupied by that portion of the monitor.

    摘要翻译: 本发明的一个实施例是用于解决虚拟机监视器和客户操作系统之间的地址空间冲突的方法。 该方法包括为操作系统分配地址空间和用于监视器的地址空间。 该方法还包括将监视器的一部分映射到为操作系统分配的地址空间和为监视器分配的地址空间,以及将监视器的另一部分定位在为监视器分配的地址空间中。 该方法还包括检测操作系统尝试访问由分配给操作系统的地址空间内的监视器部分占据的区域,以及将该监视器的该部分重新定位在该地址空间内,以允许操作系统访问 以前由监视器的该部分占据的区域。

    Controlling virtual machines based on performance counters
    8.
    发明授权
    Controlling virtual machines based on performance counters 有权
    基于性能计数器控制虚拟机

    公开(公告)号:US08819699B2

    公开(公告)日:2014-08-26

    申请号:US11618446

    申请日:2006-12-29

    摘要: Embodiments of apparatuses, methods, and systems for controlling virtual machines based on performance counters are disclosed. In one embodiment, an apparatus includes an event counter, a comparator, and virtualization control logic. The event counter is to keep an event count based on the number of occurrences of an event. The comparator is to determine whether the event count has reached a threshold value. The virtualization control logic is to transfer control of the apparatus from a guest to a host in response to the comparator determining that the event count has reached the threshold value.

    摘要翻译: 公开了用于基于性能计数器来控制虚拟机的设备,方法和系统的实施例。 在一个实施例中,装置包括事件计数器,比较器和虚拟化控制逻辑。 事件计数器是根据事件的发生次数来保持事件计数。 比较器是确定事件计数是否达到阈值。 响应于比较器确定事件计数已经达到阈值,虚拟化控制逻辑是将设备从客户机的控制传送到主机。

    INDEXED PAGE ADDRESS TRANSLATION TO REDUCE MEMORY FOOTPRINT IN VIRTUALIZED ENVIRONMENTS
    9.
    发明申请
    INDEXED PAGE ADDRESS TRANSLATION TO REDUCE MEMORY FOOTPRINT IN VIRTUALIZED ENVIRONMENTS 有权
    索引页地址翻译以减少虚拟环境中的内存空间

    公开(公告)号:US20140201421A1

    公开(公告)日:2014-07-17

    申请号:US13995126

    申请日:2011-12-22

    IPC分类号: G06F12/10

    摘要: Embodiments of systems, apparatuses, and methods for performing guest logical memory address to host physical memory address translation are described. In some embodiments, a system receives the guest logical memory address and determines an index page reference from the guest logical memory address. The system further retrieves a page index corresponding to the virtual machine. In addition, the system retrieves a first part of the host physical memory address from index page using the page index and a second part of the host physical memory address from the guest logical memory address. The system generates the host physical memory address from the first and second parts of the host physical memory address.

    摘要翻译: 描述用于执行访客逻辑存储器地址以主机物理存储器地址转换的系统,装置和方法的实施例。 在一些实施例中,系统接收来宾逻辑存储器地址,并从来宾逻辑存储器地址确定索引页引用。 该系统进一步检索对应于虚拟机的页面索引。 此外,系统使用页面索引从索引页面检索主机物理内存地址的第一部分,并从客户机逻辑内存地址检索主机物理内存地址的第二部分。 系统从主机物理内存地址的第一和第二部分生成主机物理内存地址。

    Method and Apparatus for Dishonest Hardware Policies
    10.
    发明申请
    Method and Apparatus for Dishonest Hardware Policies 有权
    不诚实的硬件政策的方法和设备

    公开(公告)号:US20140096235A1

    公开(公告)日:2014-04-03

    申请号:US13630592

    申请日:2012-09-28

    IPC分类号: G06F12/14

    摘要: A system implements dishonest policies for managing unauthorized access requests. The system includes memory management hardware to store a set of dishonest policy bits, each dishonest policy bit that is configured to a predetermined value indicating disallowed access for one of a set of memory ranges. When a processor receives an access request for a location in a memory range to which access is not allowed as indicated by a set dishonest policy bit, the processor returns a false indication according to a dishonest policy that the requested access has been performed.

    摘要翻译: 系统实施不诚实的策略来管理未经授权的访问请求。 该系统包括用于存储一组不诚实的策略位的存储器管理硬件,每个不诚实的策略位被配置为指示一组存储器范围中的一个的不允许的访问的预定值。 当处理器接收到对于由设置的不诚实策略位指示的不允许访问的存储器范围内的位置的访问请求时,处理器根据执行请求的访问的不诚实的策略返回错误的指示。