公开(公告)号：WO2014004747A2

公开(公告)日：2014-01-03

申请号：PCT/US2013048014

申请日：2013-06-26

Applicant: LYNUXWORKS INC

Inventor： MOORING EDWARD T ,  YANKOVSKY PHILLIP

CPC classification number: G06F21/566 ,  G06F9/45533 ,  G06F9/45545 ,  G06F9/45558 ,  G06F21/50 ,  G06F21/53 ,  G06F21/556 ,  G06F21/56 ,  G06F21/572 ,  G06F21/60 ,  G06F21/629 ,  G06F2009/45587 ,  G06F2221/033 ,  G06F2221/034 ,  G06F2221/2125

Abstract: Systems, methods, computer readable media and articles of manufacture consistent with innovations herein are directed to computer virtualization, computer security and/or data isolation. According to some illustrative implementations, innovations herein may utilize and/or involve a separation kernel hypervisor which may include the use of a guest operating system virtual machine protection domain, a virtualization assistance layer, and/or a rootkit defense mechanism (which may be proximate in temporal and/or spatial locality to malicious code, but isolated from it), inter alia, for detection and/or prevention of malicious code, for example, in a manner/context that is isolated and not able to be corrupted, detected, prevented, bypassed, and/or otherwise affected by the malicious code.

Abstract translation: 符合本文创新的系统，方法，计算机可读介质和制品符合计算机虚拟化，计算机安全和/或数据隔离。 根据一些说明性实现，本文的创新可以利用和/或涉及分离内核管理程序，其可以包括使用客户操作系统虚拟机保护域，虚拟化辅助层和/或rootkit防御机制（其可以是邻近的 在恶意代码的时间和/或空间位置，但与之隔离），特别是用于检测和/或防止恶意代码，例如以孤立且不能被破坏，检测的方式/上下文， 防止，绕过和/或以其他方式受到恶意代码的影响。