International Business Machines Corporation

Li Ping Hao

Dong Yan Yang

Biao Cao

Qing Feng Hao

YaLian Pan

Xi Qian

Xiao Feng Ren

Xue Yong Zhang

Protection of a kernel from a sniff and code reuse attack. A kernel mode page table in initialized in a kernel. The kernel page entries in the kernel mode page table are set from s-pages to u-pages. Supervisor mode access prevention is enabled in the u-pages. Code contained in the kernel page entries in the u-pages is executed, the kernel page entries in the u-pages are capable of execution but are not capable of being accessed and read directly.

Protection of kernel from code reuse attacks

Techniques for virtual machines include receiving virtual machine (VM) requests, and finding one or more VM requests of the VM requests that optimize available resources of a candidate host machine while seeking to minimize differences between the one or more VM requests and the candidate host machine. The one or more VM requests are allocated to the candidate host machine.

Schedule virtual machines

Growing community of inventors

Beijing, China

Li Ping Hao