Patent ID: 8468522

Claim:
A virtual machine system that builds one or more virtual machines on a real machine, comprising a hypervisor that realizes access to virtualized hardware by a guest OS that is an operating system running on said virtual machines or an application running on said guest OS by means of a physical device that said real machine has, said hypervisor including: a setting item information holding unit that holds setting item information in which a security policy to be applied to said virtual machine system is indicated as a setting value of a setting item corresponding to a type of said guest OS or a type of said application; a setting detecting unit that monitors an instruction executed by said guest OS and an output of said physical device, and detects a candidate value, which corresponds to a setting item in the setting item information, and which is used by the instruction of the guest OS or is the output of said physical device that said real machine, on which the guest OS runs, has; and a setting applying unit that, when the candidate value detected by said setting detecting unit and the setting value corresponding to the same setting item, in said setting item information, as the candidate value differ from each other, applies not the candidate value but the setting value to said guest OS or said application that is a setting target of said setting item, using hardware access from said guest OS or said application.