1. A method for triggering virtual machine introspection, comprising: determining data that needs to be protected; monitoring the data that needs to be protected; and triggering virtual machine introspection when it is determined that the data that needs to be protected is modified.