A method comprising: loading, by a data processing system, a trusted application to execute on top of an operating system, OS, that uses a guest page table, GPT, to translate guest virtual addresses, GVAs, into guest physical addresses, GPAs; creating, by the data processing system, an asserted page table, APT, for the trusted application, the APT to translate GVAs into GPAs for the trusted application; preventing, by the data processing system, the OS from modifying the APT; configuring, by the data processing system, a processor of the data processing system to use the APT instead of the GPT; and executing, by the data processing system and after configuring the processor to use the APT instead of the GPT, the trusted application, wherein: creating the APT comprises creating, by a virtual machine monitor, VMM, of the data processing system, the APT for the trusted application, and configuring the processor comprises configuring, by an interrupt service routine, ISR, the processor to use the APT instead of the GPT, wherein loading the trusted application comprises loading, by a platform protection technology, PPT, loader, the trusted application into memory and registering, by the PPT loader, each page of the trusted application with the VMM, wherein creating the APT comprises creating, by the VMM, the APT in response to the loading of the trusted application by the PPT loader, further comprising: walking, by the VMM, the GPT for each page of the trusted application in response to the PPT loader registering the corresponding page with the VMM, wherein walking for each page comprises getting access permissions for each page; and replicating, by the VMM, the GPT entry for the corresponding page to the APT, wherein replicating includes replicating the access permissions for each page. loading, by a data processing system, a trusted application to execute on top of an operating system, OS, that uses a guest page table, GPT, to translate guest virtual addresses, GVAs, into guest physical addresses, GPAs; creating, by the data processing system, an asserted page table, APT, for the trusted application, the APT to translate GVAs into GPAs for the trusted application; preventing, by the data processing system, the OS from modifying the APT; configuring, by the data processing system, a processor of the data processing system to use the APT instead of the GPT; and executing, by the data processing system and after configuring the processor to use the APT instead of the GPT, the trusted application, wherein: creating the APT comprises creating, by a virtual machine monitor, VMM, of the data processing system, the APT for the trusted application, and configuring the processor comprises configuring, by an interrupt service routine, ISR, the processor to use the APT instead of the GPT, wherein loading the trusted application comprises loading, by a platform protection technology, PPT, loader, the trusted application into memory and registering, by the PPT loader, each page of the trusted application with the VMM, wherein creating the APT comprises creating, by the VMM, the APT in response to the loading of the trusted application by the PPT loader, further comprising: walking, by the VMM, the GPT for each page of the trusted application in response to the PPT loader registering the corresponding page with the VMM, wherein walking for each page comprises getting access permissions for each page; and replicating, by the VMM, the GPT entry for the corresponding page to the APT, wherein replicating includes replicating the access permissions for each page. creating the APT comprises creating, by a virtual machine monitor, VMM, of the data processing system, the APT for the trusted application, and configuring the processor comprises configuring, by an interrupt service routine, ISR, the processor to use the APT instead of the GPT, wherein loading the trusted application comprises loading, by a platform protection technology, PPT, loader, the trusted application into memory and registering, by the PPT loader, each page of the trusted application with the VMM, wherein creating the APT comprises creating, by the VMM, the APT in response to the loading of the trusted application by the PPT loader, further comprising: walking, by the VMM, the GPT for each page of the trusted application in response to the PPT loader registering the corresponding page with the VMM, wherein walking for each page comprises getting access permissions for each page; and replicating, by the VMM, the GPT entry for the corresponding page to the APT, wherein replicating includes replicating the access permissions for each page. walking, by the VMM, the GPT for each page of the trusted application in response to the PPT loader registering the corresponding page with the VMM, wherein walking for each page comprises getting access permissions for each page; and replicating, by the VMM, the GPT entry for the corresponding page to the APT, wherein replicating includes replicating the access permissions for each page.