FIELD: computer equipment.
SUBSTANCE: invention relates to computer engineering. Technical result is achieved by inputting an audit agent into a target VM from a set of visited VMs, wherein the introduction of the audit agent includes: recording the driver loader into the computer system memory, wherein the driver loader is configured to load the audit driver into the target computer, and the audit driver is configured to perform the audit; and configuring the target VM to switch from executing the computer program to executing the driver loader when the computer program executing in the target computer issues a system call, wherein the audit agent is configured to perform audit of the target VM, wherein the audit includes an element selected from a group consisting of creating a list of legitimate computer programs installed for execution on the target VM, and determining the amount of hardware resources currently used by the target VM.
EFFECT: preventing unauthorized access to user confidential data.
20 cl, 12 dwg
