Abstract: If a request to execute an executable file of a guest operating system or an executable file being executed in the guest operating system is detected, the present disclosure calculates a hash value before the executable file is executed and compares the calculated hash value with a pre-stored hash value, thereby securing security of the executable file; parses a file system of the guest operating system prior to starting the guest operating system and verifies integrity of a virtualization driver, and if the virtualization driver has integrity according to a result of the verification, blocks modulation of a memory area where the virtualization driver is allocated, a memory area corresponding to a master boot record (MBR) of the guest operating system, and a memory area corresponding to a volume boot record (VBR) of the guest operating system, and if an access to a file occurs in the virtualization driver, determines authority to access the file to which the access was requested, and processes the access acco

Abstract: The present invention relates to a device and a method for monitoring resources in a full virtualization system, the device and method generating a file table by parsing file information, generating a memory table when a memory is allocated, and then determining whether to execute a command by a process unit with reference to the file table and the memory table when the command is generated from a guest operating system or an application such that a virtual machine monitor is requested to execute the command.

Abstract: The present invention relates to a technology that performs: checking an integrity of a paravirtualization agent before executing the paravirtualization agent; protecting the paravirtualization agent by obstructing the modulation of a memory region to which the paravirtualization agent is allocated; when file input-output is generated in the paravirtualization agent, transmitting information associated with the generated file input-output to a host-based file system protection service to inquire about accessibility; determining an authority for access to the generated file input-output through a reasoning engine in the host-based file system protection service; and transmitting a result of the determination to the paravirtualization agent, and processing the generated file input-output, thereby protecting a file in a file system.

Abstract: The present invention relates to a device and a method for monitoring resources in a full virtualization system, the device and method generating a file table by parsing tile information, generating a memory table when a memory is allocated, and then determining whether to execute a command by a process unit with reference to the file table and the memory table when the command is generated from a guest operating system or an application such that a virtual machine monitor is requested to execute the command.

Abstract: The present invention relates to a technology that performs: checking an integrity of a paravirtualization agent before executing the paravirtualization agent; protecting the paravirtualization agent by obstructing the modulation of a memory region to which the paravirtualization agent is allocated; when file input-output is generated in the paravirtualization agent, transmitting information associated with the generated file input-output to a host-based file system protection service to inquire about accessibility; determining an authority for access to the generated file input-output through a reasoning engine in the host-based file system protection service; and transmitting a result of the determination to the paravirtualization agent, and processing the generated file input-output, thereby protecting a file in a file system.