Multilevel Introspection of Nested Virtual Machines

摘要: Described systems and methods allow software introspection and/or anti-malware operations in a hardware virtualization system comprising nested hierarchy of hypervisors virtual machines, wherein is carried out to any level the from central location on host hypervisor. An engine intercepts processor event occurring machine exposed by hypervisor, determine an address object executing respective machine. The progressively translated down through all levels hierarchy, within memory space controlled Anti-malware procedures can thus be performed may comprise techniques such as signature matching protecting certain areas