Patent ID: 11861005
Assignee: LYNX SOFTWARE TECHNOLOGIES, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 36:
37. A method of processing information involving a separation kernel hypervisor, the method comprising:
partitioning hardware platform resources to isolate a plurality of guest operating system virtual machine protection domains or virtual machines from each other;
establishing isolation between the domains or virtual machines by software configuration via configuration of files in connection with establishing isolation between guest operating systems;
triggering entry into the separation kernel hypervisor upon execution of suspect code attempting to perform a boot modification of a guest operating system;
transitioning execution of the attempt from the separation kernel hypervisor to a virtualization assistance layer in a manner isolated from the guest operating system; and
analyzing, by a suspect code defense mechanism, a behavior of the guest operating system for making a policy decision regarding the behavior;
transition execution back to the separation kernel hypervisor for taking action on the policy decision.