Patent ID: 8327359
Filing Date: 2012-12-04
Classification: G06F

Abstract:
1. A computing system, comprising: at least one processor; at least one memory; a virtual machine manager configured for operation with the at least one processor and the at least one memory, and coupled to a plurality of virtual machines, the plurality of virtual machines including a first virtual machine and one or more additional virtual machines, and the virtual machine manager accessing an integrity manifest to verify integrity of at least one of one or more software components, the virtual machine manager operable to prevent unauthorized software running on the one or more additional virtual machines from affecting the first virtual machine; an integrity manifest data repository configured for operation with the at least one processor and the at least one memory, and coupled to the virtual machine manager, the integrity manifest data repository operable to store the integrity manifest for at least one of the one or more software components, the integrity manifest including operating environment runtime information associated with the at least one of the one or more software components, the operating environment runtime information for verification of the one or more software components; and an integrity measurement manager configured for operation with the at least one processor and the at least one memory, and coupled to the virtual machine manager, the integrity measurement manager operable to receive from the one or more additional virtual machines a validation request based on a data operation involving a given software component of the one or more software components, and in response to the validation request to attempt validation of the given software component using the integrity manifest for the given software component, the validation including verifying runtime integrity of the given software component with the operating environment runtime information of the integrity manifest, and verifying a memory address entry point in the data operations of the unprotected software event.