专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20060206892A1 Systems and methods for multi-level intercept processing in a virtual machine environment 有权
标题翻译：在虚拟机环境中进行多级拦截处理的系统和方法
公开(公告)号：US20060206892A1
公开(公告)日：2006-09-14
申请号：US11078141
申请日：2005-03-11
申请人： Rene Vega , Eric Traut , Joy Ganguly
发明人： Rene Vega , Eric Traut , Joy Ganguly
IPC分类号： G06F9/455
CPC分类号： G06F9/4843 , G06F9/45558 , G06F2009/45591
摘要： Various embodiments of the present invention are directed to a multi-level virtualizer that is designed to remove much of the intercept-related functionality from the base-level virtualizer (that exists outside of each partition) and, instead, incorporate much of this functionality directly into each partition. For several of the embodiments, certain intercept handling functions are performed by an “external monitor” that runs within a partition and responds to specific intercept events, and the base-level virtualizer installs these external monitors within each partition and thereafter manages the external monitors for both single-partition and cross-partition intercept events. This distributed approach to intercept handling allows for a much less complex virtualizer and moves the intercept functionality up into each partition where each external monitor uses the resources of the corresponding guest operating system in that partition to resolve the intercept event.
摘要翻译：本发明的各种实施例涉及一种多级虚拟器，其被设计为从基本级虚拟器（存在于每个分区之外）移除大部分拦截相关的功能，并且直接并入大部分功能进入每个分区。对于几个实施例，某些拦截处理功能由在分区内运行并响应特定拦截事件的“外部监视器”执行，并且基本级虚拟器在每个分区内安装这些外部监视器，然后管理外部监视器单分区和跨分区拦截事件。拦截处理的这种分布式方法允许一个不那么复杂的虚拟机，并将拦截功能移动到每个分区，每个外部监视器使用该分区中相应的客户机操作系统的资源来解决拦截事件。

2. 发明授权

US07765374B2 Protecting operating-system resources 有权
标题翻译：保护操作系统资源
公开(公告)号：US07765374B2
公开(公告)日：2010-07-27
申请号：US11627314
申请日：2007-01-25
申请人： Scott A. Field , Brandon Baker , Eric Traut , Suyash Sinha , Joy Ganguly , Forrest Foltz , David Cutler
发明人： Scott A. Field , Brandon Baker , Eric Traut , Suyash Sinha , Joy Ganguly , Forrest Foltz , David Cutler
IPC分类号： G06F21/22
CPC分类号： G06F21/552 , G06F9/468 , G06F21/51 , G06F21/53 , G06F2221/2105 , G06F2221/2141 , G06F2221/2149
摘要： This document describes tools capable of enabling a protection agent to determine, from memory inaccessible from an operating-system privilege mode, whether one or more resources of an operating system have been modified. In some instances, these tools may enable the protection agent to reside within a virtual machine monitor. In other instances, the tools may enable the protection agent to reside within a distinct virtual partition provided by the virtual machine monitor. By operating outside of the operating-system privilege mode, the protection agent may be less vulnerable to attacks by entities operating within the operating-system privilege mode.
摘要翻译：本文档描述了能够使保护代理能够从不能从操作系统特权模式访问的存储器确定操作系统的一个或多个资源是否已被修改的工具。在某些情况下，这些工具可能使保护代理能够驻留在虚拟机监视器中。在其他情况下，这些工具可以使保护代理能够驻留在由虚拟机监视器提供的不同虚拟分区中。通过在操作系统特权模式之外操作，保护代理可能不太容易受到在操作系统特权模式下操作的实体的攻击。

3. 发明申请

US20080183996A1 Protecting Operating-System Resources 有权
标题翻译：保护操作系统资源
公开(公告)号：US20080183996A1
公开(公告)日：2008-07-31
申请号：US11627314
申请日：2007-01-25
申请人： Scott A. Field , Brandon Baker , Eric Traut , Suyash Sinha , Joy Ganguly , Forrest Foltz , David Cutler
发明人： Scott A. Field , Brandon Baker , Eric Traut , Suyash Sinha , Joy Ganguly , Forrest Foltz , David Cutler
IPC分类号： G06F12/00
CPC分类号： G06F21/552 , G06F9/468 , G06F21/51 , G06F21/53 , G06F2221/2105 , G06F2221/2141 , G06F2221/2149
摘要： This document describes tools capable of enabling a protection agent to determine, from memory inaccessible from an operating-system privilege mode, whether one or more resources of an operating system have been modified. In some instances, these tools may enable the protection agent to reside within a virtual machine monitor. In other instances, the tools may enable the protection agent to reside within a distinct virtual partition provided by the virtual machine monitor. By operating outside of the operating-system privilege mode, the protection agent may be less vulnerable to attacks by entities operating within the operating-system privilege mode.
摘要翻译：本文档描述了能够使保护代理能够从不能从操作系统特权模式访问的存储器确定操作系统的一个或多个资源是否已被修改的工具。在某些情况下，这些工具可能使保护代理能够驻留在虚拟机监视器中。在其他情况下，这些工具可以使保护代理能够驻留在由虚拟机监视器提供的不同虚拟分区中。通过在操作系统特权模式之外操作，保护代理可能不太容易受到在操作系统特权模式下操作的实体的攻击。

4. 发明授权

US07685635B2 Systems and methods for multi-level intercept processing in a virtual machine environment 有权
标题翻译：在虚拟机环境中进行多级拦截处理的系统和方法
公开(公告)号：US07685635B2
公开(公告)日：2010-03-23
申请号：US11078141
申请日：2005-03-11
申请人： Rene Antonio Vega , Eric P. Traut , Joy Ganguly
发明人： Rene Antonio Vega , Eric P. Traut , Joy Ganguly
IPC分类号： G06F7/04
CPC分类号： G06F9/4843 , G06F9/45558 , G06F2009/45591
摘要： Various embodiments of the present invention are directed to a multi-level virtualizer that is designed to remove much of the intercept-related functionality from the base-level virtualizer (that exists outside of each partition) and, instead, incorporate much of this functionality directly into each partition. For several of the embodiments, certain intercept handling functions are performed by an “external monitor” that runs within a partition and responds to specific intercept events, and the base-level virtualizer installs these external monitors within each partition and thereafter manages the external monitors for both single-partition and cross-partition intercept events. This distributed approach to intercept handling allows for a much less complex virtualizer and moves the intercept functionality up into each partition where each external monitor uses the resources of the corresponding guest operating system in that partition to resolve the intercept event.
摘要翻译：本发明的各种实施例涉及一种多级虚拟器，其被设计为从基本级虚拟器（存在于每个分区之外）移除大部分拦截相关的功能，并且直接并入大部分功能进入每个分区。对于几个实施例，某些拦截处理功能由在分区内运行并响应特定拦截事件的“外部监视器”执行，并且基本级虚拟器在每个分区内安装这些外部监视器，然后管理外部监视器单分区和跨分区拦截事件。拦截处理的这种分布式方法允许一个不那么复杂的虚拟机，并将拦截功能移动到每个分区，每个外部监视器使用该分区中相应的客户机操作系统的资源来解决拦截事件。

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式