System and method for achieving protected region within computer system

A method comprising:

• providing, in a computer system a plurality of partitions having respective operating systems;
• communicating, by a layer, with the plurality of partitions;
• dynamically assigning unprotected resources including processing devices to the plurality of partitions, where a portion of the unprotected resources is reassignable from one of the partitions to another of the partitions;
• accessing, by the layer, protected resources, where the protected resources are configured to not provide a useful response to the operating systems, and where the protected resources include dedicated resources assigned to the layer that are invisible to the operating systems;
• and
• using the protected resources to restrict communications between the partitions, where the protected resources include an address conversion resource to convert between addresses in a first address space and addresses in a second address space, and a firewall to accept or reject communications between the partitions, wherein the firewall is to determine whether a request from a requester in a first of the partitions is allowed to access a resource in a second of the partitions, the firewall to allow the request to access the resource in the second partition under a first condition, and to not allow the request to access the resource in the second partition under a second condition.