A processor comprising: a virtualization system of the processor, the virtualization system comprising a memory virtualization support system comprising: a paging table to provide, during execution of guest software on a virtual machine, a reference to a page of guest-physical memory, the guest-physical memory being an abstraction of host-physical memory utilized by the processor provided to the guest software during execution; logic to combine, during execution of the guest software on the virtual machine, the reference to the page of guest-physical memory with a reference to guest-virtual memory to provide a reference to guest-physical memory; wherein the memory virtualization support system is further arranged to specify restrictions on access and to control access to a location of the guest-physical memory in accordance with the restrictions, and characterized by an extended paging table (328, 575) arranged to map, during execution of the guest software on the virtual machine, the reference to guest-physical memory (240, 250), to a reference to the host-physical memory, and arranged to map a reference to a page of guest-physical memory (240, 250) to a reference to a page of host-physical memory, wherein the extended paging table is arranged to specify an access restriction for a page of guest-physical memory (240, 250), which comprises at least one of the following: read access control information, write access control information, and execute access control information. a virtualization system of the processor, the virtualization system comprising a memory virtualization support system comprising: a paging table to provide, during execution of guest software on a virtual machine, a reference to a page of guest-physical memory, the guest-physical memory being an abstraction of host-physical memory utilized by the processor provided to the guest software during execution; logic to combine, during execution of the guest software on the virtual machine, the reference to the page of guest-physical memory with a reference to guest-virtual memory to provide a reference to guest-physical memory; wherein the memory virtualization support system is further arranged to specify restrictions on access and to control access to a location of the guest-physical memory in accordance with the restrictions, and characterized by an extended paging table (328, 575) arranged to map, during execution of the guest software on the virtual machine, the reference to guest-physical memory (240, 250), to a reference to the host-physical memory, and arranged to map a reference to a page of guest-physical memory (240, 250) to a reference to a page of host-physical memory, wherein the extended paging table is arranged to specify an access restriction for a page of guest-physical memory (240, 250), which comprises at least one of the following: read access control information, write access control information, and execute access control information. a paging table to provide, during execution of guest software on a virtual machine, a reference to a page of guest-physical memory, the guest-physical memory being an abstraction of host-physical memory utilized by the processor provided to the guest software during execution; logic to combine, during execution of the guest software on the virtual machine, the reference to the page of guest-physical memory with a reference to guest-virtual memory to provide a reference to guest-physical memory; wherein the memory virtualization support system is further arranged to specify restrictions on access and to control access to a location of the guest-physical memory in accordance with the restrictions, and characterized by an extended paging table (328, 575) arranged to map, during execution of the guest software on the virtual machine, the reference to guest-physical memory (240, 250), to a reference to the host-physical memory, and arranged to map a reference to a page of guest-physical memory (240, 250) to a reference to a page of host-physical memory, wherein the extended paging table is arranged to specify an access restriction for a page of guest-physical memory (240, 250), which comprises at least one of the following: read access control information, write access control information, and execute access control information. read access control information, write access control information, and execute access control information.