Patent ID: 8392914

Claim:
A method for recognizing a process in a guest operation system by a virtual machine monitor, comprising: step 101 of recording by the virtual machine monitor a page table information of a process to be executed upon process switching of the guest operation system, wherein said step 101 further comprises: step 1011 of performing process switching and accessing CR3 register by the guest operation system; step 1012 of capturing by the virtual machine monitor the operation of accessing CR3 register by the guest operation system; step 1013 of acquiring by the virtual machine monitor a page directory physical base address of the process to be executed; and step 1014 of determining whether the acquired page directory physical base address has been saved, and entering step 102 if the answer is NO; step 102 of acquiring by the virtual machine monitor an identification information of a currently executed process; and step 103 of storing by the virtual machine monitor the corresponding relation between the page table information of the currently executed process, which has been recorded upon a previous process switching, and the identification information of the currently executed process, wherein in said step 103 the corresponding relation between the previously recorded page directory physical base address of the process to be executed and the identification information of the currently executed process is stored in a pair of key values; wherein said page table information is the page directory physical base address.