Fault containment is proposed to construct a survivable kernel of the network security device based on the IBM virtual machine.

• 提出在IBM虚拟机器的架构上,使用错误围堵策略建立可生存的网络安全设备内核的思想。