Protecting memory of a virtual guest

A system comprising:

• a virtual machine manager that provides a virtual operation platform for a host computing system;
• a processor;
• a memory storing modules for execution by the processor, the memory comprising:
• an initialization module that initializes a virtual guest on the host computing system, the host computing system comprising the virtual machine manager, the virtual machine manager managing operation of the virtual guest, the virtual guest comprising a distinct operating environment executing in the virtual operation platform provided by the virtual machine manager;
• a receiving module that receives an allocation of run-time memory for the virtual guest, the allocation of run-time memory comprising a portion of run-time memory of the host computing system;
• and
• a protection module that sets, by the virtual guest, at least a portion of the allocation of run-time memory to be inaccessible by the virtual machine manager.