A method of determining that protected software is running in a virtualized environment includes obtaining a set of baseline measurements of system call timings in native operating system environments. In one embodiment the multiprocessor system includes at least two system controllers and a set of processing nodes interconnected by a network. The heat exchanger is configured to receive the pressured stream and indirectly heat the pressurized stream using heat from an oxygen stream from an Ion Transport Membrane.