1. System, comprising: a virtual address; a virtual machine exposed by a virtual machine monitor; a first buffer adapted for storing virtual address to physical address translations; and a protection unit adapted for verifying whether a physical address obtained from said virtual address is within boundaries of one or more physical system memory regions assigned to said virtual machine.