Patent ID: 11861005
Assignee: LYNX SOFTWARE TECHNOLOGIES, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 18:
19. A method of processing information involving a separation kernel hypervisor, the method comprising:
partitioning hardware platform resources to isolate in time and space a plurality of guest operating system virtual machine protection domains;
establishing isolation between domains or virtual machines by software configuration via configuration of files in connection with establishing isolation between guest operating systems;
triggering entry into the separation kernel hypervisor upon execution of suspect code attempting to perform a boot modification of a guest operating system;
transitioning execution of the attempt, made to a suspect code defense mechanism configured to detect boot modification attempts, from the separation kernel hypervisor to a virtualization assistance layer in a manner isolated from the guest operating system;
analyzing, by the suspect code defense mechanism, behavior of the guest operating system for making a policy decision regarding the behavior;
transition execution back to the separation kernel hypervisor for taking action on the policy decision.