Virtualization is the creation of a virtual (rather than actual) version of something, such as an operating system, a server, a storage device or network resources.

learn more… | top users | synonyms

0
votes
1answer
28 views

Upgrade my Dell Inspiron laptop for PenTesting [on hold]

I have a Dell Inspiron N5110 & wanna upgrade it to start practising pentesing with virtual machines. What do u suggest from specs below to upgrade (I have Kali Linux, Tails OS, XP, Metasploitable ...
1
vote
0answers
22 views

Snort only detect local issues

I have installed two physical machines with KVM virtualization using Red Hat as OS ( h1 and h2). In h1 I have installed the virtual machines w1 and db1 In h2 the virtual machines w2 , db1 and ids. ...
1
vote
0answers
48 views

Limit Packets Per Second

Since last week I have been seeing something fishy and it seems to be worsening. I tried many firewalls and they seem to be useless. I blocked all unwanted ports and only few ports are open so I found ...
2
votes
2answers
66 views

Can a virtual machine be used instead of the host?

I was thinking of using a Debian guest as my main 'host' instead of my actual host (Ubuntu). Do you think this will have any advantages in terms of making it difficult for digital forensics to ...
0
votes
0answers
17 views

Removing Virtual Guest Additions Safely

So say I have a virtual machine that has been handed to me by an end user for forensics. It's a virtual machine exported as an appliance. I don't want VirtualBox's guest additions or VMWare Tools to ...
0
votes
2answers
53 views

Host an application on a virtualbox? [duplicate]

I want to host an application locally, but I was worried about security of my local files. I decided to 'encapsulate' the application using VirtualBox. Is that safe for my host OS (Windows)?
1
vote
1answer
40 views

How can a VPN use a virtual router and not send encrypt traffic and still be safe?

Today in networking class we were talking about VPNs. The prof got on topic of virtual routers and said that a way some VPNs work is by a client would purchase the service from the ISP and the ISP ...
0
votes
0answers
21 views

Are paravirtualized drivers a security risk?

Below is a copy of my answer that I gave in some other thread (Would running VMs inside of VMs be a more secure way to study viruses, etc?) about a topic of security of nested virtualization. I would ...
7
votes
1answer
190 views

Can virtual machines be used to isolate vulnerable software?

I have had a look at most of the previous questions about virtual machines (VMs) and they all appear to be focused on hosting malware in the VM and preventing it breaking out of the VM. What I can’t ...
0
votes
1answer
38 views

PCI Compliance - Antivirus in host and virtual environment?

We have a couple servers with a host system, and virtual DB and Web instances. Is it possible to be compliant with PCI if you install the Antivirus only on the host system, or does it need to be ...
-1
votes
2answers
45 views

Is openVZ patched against all exploits for its current kernel version?

I am looking for a container vitalization software that will allow me to create containers that will house specific software/jobs/tasks which I can start stop at will (and bind to interface aliases). ...
0
votes
0answers
59 views

PCI-DSS: Recomendations for Mixed-Mode Virtual Environments

We are PCI-DSS 2.0 compliant. We have three internal networks: GENERAL (workstations, app file servers) workstations can RDP to the PCI servers in order to work on the cardholder data. MANAGEMENT ...
1
vote
2answers
64 views

How Secure are Virtual Networks [duplicate]

When using a Virtual Network, is it possible to infect the underlying Network infrastructure with malware from the Virtual Network. How safe is the use of Virtual Networks?
5
votes
2answers
143 views

CTF competitions/challenges that are Windows based?

I've been messing about in CTF's for a while and I also do pen-testing professionally, what i've noticed is a distinct lack of CTF competitions using windows environments. This is in stark contrast ...
1
vote
0answers
58 views

Are Hyper-V Memory Snapshots secure/encrypted?

When dealing with encryption tools (TrueCrypt, Bitlocker and any successors) the passwords are always somewhere in memory. Therefore when there are memory dumps on a hard disk, for example in the ...
0
votes
1answer
81 views

How would one go about setting up a system with security in mind? [closed]

I run a standard laptop at home (dual-boot Fedora 20 and Windows 7; the Windows side is almost never used). Soon my other computer will be working again; it will have Windows 8.1 and some flavor of ...
3
votes
1answer
36 views

Design differences of tails and whonix concerning virtualization

Tails and Whonix both can run in VirtualBox. Tails doesn't recommends it for security reasons (https://tails.boum.org/doc/advanced_topics/virtualization/index.en.html), for Whonix it seems to be a ...
2
votes
1answer
38 views

Virtualisation: security on the host side

Virtualised environments are focused on isolating the guest OS. Using the VirtualBox model, the guest might be behind a virtual NAT and/or talk only with other VMs via internal networks, and only ...
1
vote
0answers
36 views

What aspects of a Host OS can be detected from VirtualBox VM? [closed]

What aspects of a Host OS can be detected from VirtualBox VM? Processor and display features are all I can think of. What exactly about them? Any other features of the Host that a user with ...
0
votes
1answer
226 views

SFTP between guest virtual machine and its host

The System I am using Windows 7 host with Cygwin and a virtual machine running Linux. The actual running guest is an Arch Linux ISO. The Objective I want to share files between the Cygwin host and ...
-2
votes
2answers
76 views

Untraceability of Virtual Machine [closed]

I'd like to know if it is possible to set a Virtual Machine as a protection against traceability. I would want my traffic to be impossible (or hard) to link to my current computer. I guess that the ...
0
votes
1answer
68 views

Plausible deniability regarding KeepassX files

I recently installed Guest Additions in my Windows 7 Virtual Machine because I could not stand working without widescreen and high resolution. I have read somewhere that this could be a possible ...
2
votes
3answers
2k views

Replacement for DVL (Damn Vulnerable Linux)?

I've recently spotted that DVL (Damn Vulnerable Linux) has gone inactive. My first question is what happened to cause them to stop releasing it? Secondly, I have found some references to other ...
0
votes
3answers
103 views

Testing Malware in one Virtual Machine which is running side by side along with other Virtual Machines

I want to harden the security of my host system and side by side running virtual machines while testing some files for malware in one of the virtual machines. Here comes a list of questions that I ...
0
votes
1answer
63 views

How secure is user-mode Linux, in terms of protecting the host system?

Two questions about User-Mode Linux: Suppose that a privilege escalation attack is used to gain root in a UML guest. Assuming modern (3.0 or later) host and guest kernels, is it trivial to escape ...
0
votes
3answers
1k views

VPS Privacy: OpenVZ vs KVM vs Xen

Considering OpenVZ, KVM and Xen: Which VM technology is the most difficult for the host's administrators to access given an encrypted root partition? Can I have a reasonable expectation that rogue ...
2
votes
2answers
187 views

Does a VM keylogger listen to the keyboard activities of the host?

I am running a Windows XP virtual machine on a Windows XP host machine. I use the VM for suspicious websites and software/applications. In the case a kaylogger will be installed on my VM: will this ...
0
votes
4answers
115 views

Can a virus on the host affect the VM guest [duplicate]

let me explain my problem. The wifi on my macbook suddenly stopped working so tried to use my usb wifi adapter on a linux VM. But the funny thing is that nothing works on the guest vm either... Well ...
2
votes
1answer
61 views

Can a malicious user do any harm using /dev/kvm?

I'd like to know if giving access to Intel version of /dev/kvm on Linux to a user that just wants to spawn VMs gives him any extra privileges. That is, are her VMs subject to process scheduling just ...
0
votes
1answer
76 views

How can I set up a secure virus laboratory? [duplicate]

I've been playing around with virtual operating systems for some time and began wondering: would it be possible to set up a virus laboratory in a virtual machine? If not, are there other ways that do ...
6
votes
2answers
559 views

Exactly how secure is VM browsing?

I generally do all of my web browsing in a VM. I have one "safe" VM running Ubuntu that has guest services installed. I generally only go to sites I deem are trustworthy here. I also have an "unsafe" ...
0
votes
1answer
145 views

Using a virtual machine for increased layer of privacy (w/ tor)?

One of my friends told me that running tor in a virtual machine Linux and then passing it through a proxy on the underlying Windows would provide in his words great security. Is this true?
14
votes
3answers
2k views

Can a guest virtual machine be compromised by a virus on the host machine?

All questions ask about the other way round, ie. can a virtual machine compromise the host. But I'm asking can a virus on the host machine compromise the guest virtual machine?
0
votes
1answer
136 views

How safe is the VirtualBox NAT network adapter option?

I had an Ubuntu VM running and I was using Firefox in it to look at tutorials; then my antivirus detected an attempt to forcefully install a fake Java Upgrader. From what I know about the VirtualBox ...
0
votes
1answer
125 views

Virtualization / Cloud-Stack fingerprinting from running VM

How can the host environment (not just the OS) be identified from a running guest VM. To determine what the underlying host and virtualization stacks being used actually are. I.e. whether there's a ...
7
votes
3answers
799 views

How does a root kit work inside a virtual machine?

In my class, we are discussing virtual machine based root kits. I've research root kits, but could not find any information specifically talking about how root kits work inside of virtual machines ...
4
votes
5answers
741 views

Am I safe if I run untrusted applications inside a Virtual Machine [duplicate]

I have some untrusted software. I plan to run them on a guest Windows 7 on my host Windows 8 OS using Oracle VirtualBox. In the worst case, will only my guest OS be affected? Can the hacker access ...
1
vote
1answer
310 views

Is a VirtualBox Host-only Adapter safe?

I have a VM in VirtualBox with two network adapters: a Host-only adapter and a NAT adapter; I was wondering if the VM gets compromised, is my Host-only adapter putting my host in danger? --- ...
2
votes
3answers
371 views

Can I use 777 file permissions inside server virtualisation (that only I have access to) without worry?

For this question, please assume I have followed every possible security measure to secure my Linux server. Only I have access to the web server via one open SSH port. If there are security issues ...
1
vote
0answers
73 views

Enabling virutalization, addressing the bluepill risk?

Background to this question is the ambivalence I assume with virtualization. Also to start directly with clarity: the term bluepill should here be a placeholder to denote "malware that uses ...
0
votes
1answer
447 views

Full disk encryption for server running virtual machines

I have a question about how to properly set up full disk encryption on a server running virtual machines. My setup is Windows 2012 with 2 VM's(Hyper-V) on it. I was looking into using Becrypt for ...
5
votes
2answers
103 views

Does RNG play a role in PGP signing?

We have a Jenkins system that builds and PGP-signs software releases, and we are considering moving the signing component to an isolated VM instead of running it as part of the overall builder ...
1
vote
0answers
81 views

How does Travis CI protect itself against being used for attacks?

Travis CI allows anyone to run any code on their servers by checking it into GitHub. How do they ensure that someone isn't taking advantage of their servers to launch an attack or other malicious ...
2
votes
1answer
388 views

How to configure Suricata to not interfere with virtual machine

I'm currently planning on setting up Suricata as a firewall on my laptop. I'm wondering however if it's possible to set Suricata to not interfere with traffic to and from specific virtual machines ...
0
votes
0answers
22 views

Virtualization Security Benifits [duplicate]

This is a bit of an open ended question just looking for views on the subject. I'm looking at virtualization to provide clear segregation of two application (both require a Linux environment), my ...
0
votes
2answers
139 views

Why does host's antivirus detect guest's malware?

I'm analyzing some malicious files on a VM and I'm noticing that every time I open a file, the host's antivirus detects it. Why does this happen? Is the malicious content escaping to the host?
0
votes
3answers
208 views

What are the pros and cons of using live CDs vs VMs for malware analysis?

I'm planning on doing some malware research for a research project, and I was wondering what would be a better option for keeping my system safe from viruses accidentally infecting it. I'm only ...
10
votes
1answer
215 views

Where does a Hyper-V guest get its entropy when generating a certificate authority key pair?

According to findings by the EFF's SSL observatory, there are "tens of thousands of keys that offer effectively no security due to weak random number generation algorithm." My understanding of that ...
0
votes
1answer
781 views

Can a firewall blocking a guest virtual machine secure the host?

I have searched up whether a host is safe from its guest, and generally, it is said that, aside from vendor security flaws, a guest that is infected can infect the host over a shared network. So, ...
1
vote
0answers
40 views

How to manage security for multiple PC and VM?

I have a firewall VM which creates I have used to setup subnet for different purposes. For example: (fake ips, of course) 1.1.2.1/24 DMZ 1.1.3.1/24 Internal 1.1.5.1/24 security/logging I use ...