Techniques for protecting memory pages of a virtual computing instance

A system for protecting memory of a virtual computing instance, the system comprising:

• a host computer;
• an abstraction layer executing within the host computer;
• the virtual computing instance, supported by the abstraction layer;
• and
• a component executing within the virtual computing instance,
• wherein the abstraction layer is configured to:
• receive a first request, from the component, to protect a first memory page,
• determine, by examining a privilege mode of the component, that the component is permitted to make the first request,
• protect the first memory page by updating a data structure that tracks protected memory page thereby defining a first protected memory page,
• detect a write to the first protected memory page,
• responsive to the detecting, identify an alert action for the first protected memory page, and
• perform the alert action.

A non-transitory computer-readable medium storing instructions that, when executed by a processor, cause the processor to perform a method for protecting memory of a virtual computing instance executing within a host computer, the method comprising:

• receiving a first request, from a component executing within the virtual computing instance;
• to protect a first memory page;
• determining, by examining a privilege mode of the virtual computing instance, that the component is permitted to make the first request;
• protecting the first memory page by updating a data structure that tracks protected memory pages thereby defining a first protected memory page;
• detecting a write to the first protected memory page;
• responsive to the detecting, identifying an alert action for the first protected memory page;
• and
• performing the alert action.