0
votes
1answer
74 views

How would one go about setting up a system with security in mind? [closed]

I run a standard laptop at home (dual-boot Fedora 20 and Windows 7; the Windows side is almost never used). Soon my other computer will be working again; it will have Windows 8.1 and some flavor of ...
0
votes
1answer
59 views

How secure is user-mode Linux, in terms of protecting the host system?

Two questions about User-Mode Linux: Suppose that a privilege escalation attack is used to gain root in a UML guest. Assuming modern (3.0 or later) host and guest kernels, is it trivial to escape ...
1
vote
1answer
69 views

Are virtual “canary” systems used to detect malicious programs?

I was wondering if malicious programs are detected using a virtual system. For example a "canary" system would be set up in a virtual environment then unknown and untrusted programs would be executed ...
4
votes
1answer
124 views

How to secure application VM?

This question is derived from my previous question on Isolating Web application where two approaches were recommended. Apache Chroot Jail Isolation through Virtualization My question is if one of ...
5
votes
3answers
2k views

Designing a Sandbox for Windows

I am thinking about the design for a sandbox, which is able to execute arbitrary unmodified, untrusted binaries. The goal is to implement an application Unlike something like e.g. Google Chrome's ...
4
votes
3answers
325 views

What are the security precautions taken to ensure a virtualized domain can't compromise its host

I recently started learning about xen and became more interested in visualization. I read a few whitepapers, did a search here, but couldn't find an answer. My guess is someone will link me to some ...
2
votes
2answers
1k views

Can an unprivileged process in a hardware-virtualized system cause a `VMExit` without cooperation from the kernel?

For SVM or VT-x, the set of conditions which trigger a vmexit to the virtual machine monitor is pretty complex. Can an unprivileged process trigger any of these without assistance from the kernel? ...