Patent ID: 7035963

Claim:
A method comprising: locating a second portion of a virtual machine monitor (VMM) in a second address space associated with the VMM; mapping a first portion of the VMM into a first address space and the second address space, the first address space being associated with a guest operating system; detecting that the guest operating system attempts to access a region occupied by the first portion of the VMM within the first address space; if determining that no unused region exists within the first address space, selecting a random region within the first address space, copying content of a memory located at the random region to the second address space, re-mapping the first portion of the VMM into the random region, and accessing the copied content of the memory in the second address space if detecting an attempt of the guest operating system to access the content of the memory previously located at the random region; and periodically relocating the first portion of the VMM within the first address space until finding a region that is infrequently used.