Patent ID: 9176763
Filing Date: 2015-11-03
Classification: G06F

Abstract:
1. An apparatus operating in a virtualized environment, comprising: a processor; and a memory coupled to the processor configured to store at least a first set of instructions for execution of at least one virtual machine by the processor, wherein each of the at least one virtual machine executes a single hypervisor that is being executed in a first security ring, the memory further stores a second set of instructions for execution of a single guest program by the processor over each of the at least one virtual machine, the guest program comprises a single kernel and at least one application executed therein, wherein the single kernel of the single guest program is executed in the first security ring with the single hypervisor and the at least one application of the single guest program is executed in a second security ring, wherein the first security ring is Ring wherein an instruction issued by the at least one application of the single guest program is executed without trapping the single hypervisor, wherein the instruction requires intervention by the kernel of the single guest program and the single hypervisor, and wherein the single hypervisor runs the single guest program in the first security ring.