Granted Patent B1

US 12,367,062 · App. 18/744,947 · Granted Jul 22, 2025

Inventors: Alexey Koryakin (Moscow, RU); Nikolay Dobrovolskiy (Moscow, RU); Serguei M. Beloussov (Singapore, SG)

Assignee: Parallels International GmbH

G06F9/45558G06F2009/45575G06F2009/45579

Abstract

Claims (37)

1. A method comprising:

identifying with a virtual machine monitor (VMM) in dependence upon parameters of a virtual machine (VM) exit triggered by a VM managed by the VMM a VMM virtualization extension module of a plurality of VMM virtualization extension modules;

invoking, with the identified VMM virtualization extension module of the plurality of VMM virtualization extension modules, an application programming interface (API) to perform an action; and

resuming execution of the virtual machine; wherein

a guest API implements an API call for asynchronous communications between the VMM and a set of VMs in execution where the VM is one of the set of VMs such that at least one of context switching and processor cache resets associated with the VM exit and the steps of invoking the API and resuming execution are eliminated.

2. A method comprising:

identifying with a virtual machine monitor (VMM) in dependence upon parameters of a virtual machine (VM) exit triggered by a VM managed by the VMM a VMM virtualization extension module of a plurality of VMM virtualization extension modules;

invoking, with the identified VMM virtualization extension module of the plurality of VMM virtualization extension modules, an application programming interface (API) to perform an action; and

resuming execution of the virtual machine; wherein

the VMM virtualization extension module of the plurality of VMM virtualization extension modules provides an antivirus functionality by:

filtering input and output operations and memory access requests initiated by one or more applications running on the VM;

disabling any memory access requests that match a defined configurable pattern; and

VMM virtualization extension module of the plurality of VMM virtualization extension modules offloads one or more operations of a guest-side antivirus application; and

the one or more operations are selected from the group comprising tracking a memory access, filtering a memory access, a disk access and a network interface controller accesses.

3. A method comprising:

identifying with a virtual machine monitor (VMM) in dependence upon parameters of a virtual machine (VM) exit triggered by a VM managed by the VMM a VMM virtualization extension module of a plurality of VMM virtualization extension modules;

invoking, with the identified VMM virtualization extension module of the plurality of VMM virtualization extension modules, an application programming interface (API) to perform an action; and

resuming execution of the virtual machine; wherein

when the VM exit has been triggered by an I/O request, the process further comprises

performing with the identified VMM virtualization extension module of a plurality of VMM virtualization extension modules a request inspection; and

responsive to failing to match parameters of the I/O request to one or more request inspection patterns, forwarding the I/O request to a virtual machine controller.

4. The method according to claim 3 , wherein the one or more request inspection patterns are configured by one or more messages triggered by a guest extension module forming part of the virtual machine.

5. A method comprising:

identifying with a virtual machine monitor (VMM) in dependence upon parameters of a virtual machine (VM) exit triggered by a VM managed by the VMM a VMM virtualization extension module of a plurality of VMM virtualization extension modules;

invoking, with the identified VMM virtualization extension module of the plurality of VMM virtualization extension modules, an application programming interface (API) to perform an action; and

resuming execution of the virtual machine; wherein

when the VM exit has been triggered by an I/O request, the process further comprises:

performing with the identified VMM virtualization extension module of a plurality of VMM virtualization extension modules a request inspection; and

responsive to matching parameters of the I/O request to one or more request inspection patterns aborting the request processing and writing an error code into a predefined general purpose register of a virtual processor associated with the virtual machine.

6. A method comprising:

identifying with a virtual machine monitor (VMM) in dependence upon parameters of a virtual machine (VM) exit triggered by a VM managed by the VMM a VMM virtualization extension module of a plurality of VMM virtualization extension modules;

invoking, with the identified VMM virtualization extension module of the plurality of VMM virtualization extension modules, an application programming interface (API) to perform an action;

exporting with the identified VMM virtualization extension module of a plurality of VMM virtualization extension modules a configurable callback interface to be invoked prior to invoking a predetermined function of the API exported by the VM; and

invoking the configurable callback interface; and

resuming execution of the virtual machine; wherein

the invoked configurable callback interface in a first configuration modifies one or more parameters of the VM exit before returning execution control the identified VMM virtualization extension module of a plurality of VMM virtualization extension modules; and

the invoked configurable callback interface in a second configuration aborts a request before returning execution control the identified VMM virtualization extension module of a plurality of VMM virtualization extension modules.

Assignments (1)

Continuity (3)

References Cited (27)