3 results about "Memory virtualization" patented technology

This invention discloses a GPU memory virtualization method and apparatus based on deep parsing of the ioctl protocol, belonging to the field of electronic information technology. The method includes: intercepting ioctl system call requests initiated by the target container to obtain ioctl system call requests for GPU memory management; parsing its parameter blocks and extracting memory-related instructions to obtain memory-related instructions for subsequent auditing; constructing a shadow object tree and intelligently auditing memory allocation and mapping operations to obtain a precise memory usage ledger; determining whether the quota has been exceeded and executing interception during the physical admission control phase to obtain a control result on whether instruction pass-through is allowed; implementing view virtualization and returning virtualized memory information to the application in the target container to achieve transparent application adaptation, thereby completing precise virtualization isolation and multi-tenant secure sharing of GPU memory. This invention combines kernel-level control strength with user-space deployment flexibility.

The application provides a virtualized log vulnerability repair method and device, and relates to the technical field of computer security. The method comprises the following steps: in response to detecting that a target process uses a Log4j2 framework, obtaining a process identifier; based on the process identifier, creating an independently running virtual process in user memory through an eBPF module of a kernel, and starting a Java virtual machine and an associated network service in the virtual process; constructing a string containing a JNDI protocol identifier as an attack payload in the target process, which is used to simulate Log4j2 remote vulnerability exploitation behavior; sending the attack payload from the target process to the virtual process, and judging whether the Log4j2 remote vulnerability exists according to the response of the virtual process to the attack payload; if the Log4j2 remote vulnerability exists, mounting the eBPF module to the kernel network driver layer to intercept related network traffic. The application combines memory virtualization with kernel layer traffic interception, and realizes accurate detection and effective repair of the Log4j2 remote vulnerability.

The present application relates to the technical field of computer system virtualization, in particular to a virtual machine memory virtualization method and system for a Sunway processor. The method manages the reserved continuous physical memory through a virtual memory device, and provides a standard interface to the user state; the virtual machine obtains continuous memory as the guest physical memory through the interface; and then the direct mapping of the guest physical address to the host physical address is established by using the segment mapping of the virtual mode of the Sunway processor. The system comprises corresponding memory pools, driving modules and other components. The scheme realizes near-zero overhead address conversion on the Sunway platform without hardware assistance, and solves the flexible management and efficient sharing of the guest memory across processes through the device interface for the first time.