MEMORY INTROSPECTION ENGINE FOR PROTECTING INTEGRITY OF VIRTUAL MACHINES Russian patent published in 2017 - IPC G06F12/10 G06F9/455 G06F12/14 G06F21/53 G06F21/62 

FIELD: information technology.

SUBSTANCE: host system is disclosed, containing at least one processor configured to perform: an operating system configured to allocate a section of virtualized physical memory of a virtual machine to a target program object executed in the virtual machine. The virtual machine is opened by a hypervisor performed on the host system. Virtualized physical memory is divided into pages. Page is the smallest unit of memory individually displayed between virtualized physical memory and physical memory of the host system; and a protection preparation module configured to change allocation of the target object memory in response to the determination of whether the target program object meets the selection criteria for malware protection, when the target program object meets this selection criteria. Changing the memory allocation includes ensuring that any page containing at least a portion of the target program object is reserved for the target program object.

EFFECT: protection of computer systems from malicious programs.

29 cl, 10 dwg