Patent ID: 11861005
Assignee: LYNX SOFTWARE TECHNOLOGIES, INC.
Field: Computer technology (Electrical engineering)
Classification: CPC G | IPC G

Claim 0:
1. A method of processing information involving a separation kernel hypervisor, the method comprising:
triggering entry into the separation kernel hypervisor upon execution of suspect code attempting to perform a boot modification of a guest operating system;
transitioning execution of the attempt, made to a suspect code defense mechanism previously-configured for detecting the suspect code, from the separation kernel hypervisor to a virtualization assistance layer in a manner isolated from the guest operating system;
transitioning execution of the attempt from the virtualization assistance layer to the suspect code defense mechanism;
analyzing, by the suspect code defense mechanism, behavior of the guest operating system and determining a policy decision;
passing the policy decision and transitioning execution of the attempt from the suspect code defense mechanism to the virtualization assistance layer; and
passing the policy decision and transitioning execution of the attempt from the virtualization assistance layer to the separation kernel hypervisor.