Apparatus and method for preventing security threat to virtual machine

An apparatus for preventing a security threat to a virtual machine, comprising:

• one or more processors;
• and
• executable memory comprising a program stored therein and executed by the one or more processors,
• wherein the program is configured to:
• cause a hypervisor for virtualization in a host kernel to execute a virtualization instruction corresponding to a service requested by a virtual machine of a host application, and
• cause a hypervisor for monitoring to interrupt the virtualization instruction in response to a security threat event occurring in a monitoring area of the hypervisor for virtualization and to control a process and thread of the host kernel,
• the hypervisor for monitoring being located in an area separate from an area in which the hypervisor for virtualization is located in the host kernel,
• wherein the security threat event is triggered by access to an interrupt point preset in the monitoring area of the hypervisor,
• wherein, when the security threat event that causes a memory area to be altered occurs in the monitoring area, the program controls the process and the thread depending on a result of a determination as to whether the altered memory area is an invariable area.