Patent ID: 7827371

Claim:
A method comprising: determining if an isolation driver is present in a non-volatile storage of a system and if so, determining if a processor of the system supports virtualization and if so, launching the isolation driver in a first privilege level, the first privilege different than a system privilege level and user privilege level, and wherein the isolation driver is launched before third party code; launching the isolation driver prior to a conclusion of a driver execution environment (DXE) phase of a pre-boot environment; creating a 1:1 virtual mapping between a virtual address and a physical address, wherein the physical address is to be accessed using a page directory entry of a page directory and a page table entry of a page table using the isolation driver; controlling access to a memory page associated with the page table entry based on a plurality of availability bits of the page table entry; and allocating the memory page to an exclusion list by writing a predetermined code in the plurality of availability bits of the associated page table entry.