Patent ID: 11893107
Assignee: KOREA ADVANCED INSTITUTE OF SCIENCE AND TECHNOLOGY
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. An apparatus for preventing a security threat to a virtual machine, comprising:
one or more processors; and
executable memory comprising a program stored therein and executed by the one or more processors,
wherein the program is configured to:
cause a hypervisor for virtualization in a host kernel to execute a virtualization instruction corresponding to a service requested by a virtual machine of a host application, and
cause a hypervisor for monitoring to interrupt the virtualization instruction in response to a security threat event occurring in a monitoring area of the hypervisor for virtualization and to control a process and thread of the host kernel,
the hypervisor for monitoring being located in an area separate from an area in which the hypervisor for virtualization is located in the host kernel,
wherein the security threat event is triggered by access to an interrupt point preset in the monitoring area of the hypervisor,
wherein, when the security threat event that causes a memory area to be altered occurs in the monitoring area, the program controls the process and the thread depending on a result of a determination as to whether the altered memory area is an invariable area.