Virtualization is the creation of a virtual (rather than actual) version of something, such as an operating system, a server, a storage device or network resources.

learn more… | top users | synonyms

1
vote
1answer
201 views

Is a separate server needed for remotely accesing accounting software?

Wishing you all a great 2014. I hope this is the right section. Basically we have a Dell Poweredge R520 server in our office, and we now want to install some accounting software that can be accessed ...
1
vote
2answers
410 views

Someone logged on my Centos VM; Can they attack the host OS?

I'm using Windows 7 and decided to learn Linux Administration (Centos 6.4) using Oracle VirtualBox to host the Linux system. In my network configuration I choose "Bridged Adapter". I set the VM's IP ...
1
vote
0answers
58 views

What are the steps to securing encryption keys/databases on an unsecured DAAS provider?

Most Desktop As A Service providers store their virtual hard drives and the VMs RAM in a way that allows them to access their contents. Choosing a provider who offers a 'no-knowledge of server' ...
0
votes
1answer
142 views

How can an out-of-the-box (Windows) server not be secure? [closed]

Background: I'm considering switching from shared web hosting to VPS for added security. However - managed VPS's costs much more than unmanaged ones. So, assuming: I secured my website against any ...
3
votes
4answers
342 views

Shared hosting vs VPS

I have an Asp.net site. Which hosting system do I need to secure it adequately* against anyone reading private information that's on the server? This is assuming I'm not worried about the sysadmins ...
3
votes
3answers
400 views

Backup personal email on VPS - privacy, security and trust risks

FastMail.fm hosts my personal email account. Now they claim to have reliable backup services, but I'd like to have my own copy of my email archives. What I'd like to do is back up to my VPS, which ...
1
vote
1answer
510 views

Virtual Box security [duplicate]

I am using virtual box to run a secure machine. I am not fully confident in the hosts security. My assumptions are that of course the host can read the VM when the VM is running and that if the ...
2
votes
3answers
363 views

Suspicious VMWare connections that bypass firewall

I'm running VMWare 5 and I have found that when I start up VMWare I see two connections: TCP 10.100.100.161:55555->as-40816.engx.vmware.com:https (ESTABLISHED) TCP ...
0
votes
2answers
117 views

VM security, how to access main OS

Is there any way for me to access the main computer if the VM has been infected? Let's say that I am running Debian or ubuntu in a VM and the main computer uses Windows (or other way around just so ...
0
votes
2answers
291 views

Isolating host machine from external network

How to prevent a host machine from sending/receiving packets with the following network configuration: eth0 - physical NIC :: not configured; tun0 - virtual NIC for VM which role is the gateway for ...
1
vote
1answer
73 views

Are virtual “canary” systems used to detect malicious programs?

I was wondering if malicious programs are detected using a virtual system. For example a "canary" system would be set up in a virtual environment then unknown and untrusted programs would be executed ...
4
votes
4answers
389 views

Is packet sniffing a risk on VPS? If so, what precautions should I ask my host if they take?

I'm wondering if packet sniffing is a risk on my VPS. Is it always a risk or are their precautions a host vendor can take? e.g. a switched network etc. If I wanted to ask my host what precautions ...
5
votes
4answers
740 views

In this case, does Virtualization gives more security?

A: running an OpenBSD machine with a httpd and a smtp server? vs. B: running an OpenBSD machine as virtualization host with QEMU having two guest OpenBSD system: one for smtp and one for httpd. ...
2
votes
2answers
288 views

Using a virtual machine as a buffer between USB media and OS

I was directed here from the Unix & Linux site. I've gone through some of the related questions, but they seem to be more concerned about whether a guest OS can access the host OS in someway. ...
4
votes
1answer
445 views

Is it possible to detect host-machine of my virtual-machines?

So basically I need to know is there any way to find a connection (or relation) between packets sent by my VMs and my host machine. In my lab I have lots of workstations, each running a VirtualBox ...
3
votes
3answers
252 views

Why Parallels 8 installer looking into my Chrome's Cookies?

While trying to install Parallels on OS X I looked into Activity Monitor to find where is the installed Parallels located (it was weird that it stays invisible in Application folder). And than I found ...
6
votes
1answer
1k views

Is it safe to use rng-tools on a virtual machine?

I am currently working on an app that needs to create GPG key pairs using the gpg tool. Unfortunately, this tool takes a long time to generate a key pair if there is insufficient entropy/randomness ...
3
votes
2answers
490 views

Instrumentation vs virtual machine introspection

I cannot differentiate between Instrumentation and Virtual machine introspection. Since the goal of Virtual Machine introspection is to examine the properties of a target through virtual machine ...
3
votes
1answer
547 views

Isolate a Virtualbox VM from local network [closed]

I have the need to isolate a virtual machine created with Virtualbox from the local network but I need to provide internet access to that machine. It is the first time that I face this kind of ...
6
votes
1answer
162 views

Are the Trends of Type II Hypervisors and Newer Applications a Security Issue?

It seems that every time I have a new 'binge' at using the likes of VirtualBox or VMWare (the Type II version), they've introduced even more high-level features, often ones that remove layers between ...
0
votes
1answer
68 views

Performance issues while applying encryption at host or guest level?

One of the security expert here suggested me to apply encryption at guest(virtual machine) level rather than applying at host level with good reason. Before applying that I want to know what can be ...
0
votes
1answer
138 views

Which one is best, host or guest encryption?

Can anyone please tell me which option is better, I mean whether I should encrypt my data at virtual machine level or guest level in cloud? I tried to investigate it but did not find best solution so ...
1
vote
1answer
88 views

VM Guest network security with NAT?

Supposing I have an untrusted guest VM (e.g. I'm running a cloud data centre). If I set the network connection up to use NAT, the guest can still access the internet. But what's to stop them accessing ...
2
votes
1answer
239 views

How are IaaS Virtual Machines Isolated?

I am currently examining Hypervisor firewalls for my graduate thesis, but I unfortunately don't have a lot of experience with IaaS environments. How are IaaS Virtual Machines network isolated from ...
1
vote
1answer
124 views

Enforcing software expiration on virtual machines

It is possible for virtual machine guests to bypass the software expiration timers for paid software. This example shows one way to do this on VMWare. A simpler method is for the user to "revert to ...
-5
votes
2answers
4k views

Is it possible to encrypt a virtual machine using virtualbox? [closed]

Is it possible to encrypt a virtual machine using virtualbox, and not leave accessible to the users of the machine where it hosted, and not allow any file to be extracted it with some program ? The ...
3
votes
1answer
217 views

What are the tradeoffs in cost, effort, and value in moving a database server to a virtualized DMZ environment?

I am quite new to the DMZ concept and working on a project as part of my master thesis where Remote access is required for the Development environment. However, there is a functional requirement for ...
4
votes
1answer
127 views

How to secure application VM?

This question is derived from my previous question on Isolating Web application where two approaches were recommended. Apache Chroot Jail Isolation through Virtualization My question is if one of ...
5
votes
3answers
2k views

Designing a Sandbox for Windows

I am thinking about the design for a sandbox, which is able to execute arbitrary unmodified, untrusted binaries. The goal is to implement an application Unlike something like e.g. Google Chrome's ...
23
votes
3answers
5k views

Is it appropriate to use haveged as a source of entropy on virtual machines?

While looking for solutions to entropy pool depletion on virtual machines, I came across an interesting project called haveged, which is based on the HAVEGE algorithm (HArdware Volatile Entropy ...
8
votes
1answer
2k views

What is Virtual Machine Introspection?

I have seen it presented as a special security technique but it seems like it basically means automated security monitoring of your virtual environment. Is that the basic idea?
0
votes
1answer
127 views

undetectable virtualization apps to spoof web browsers [closed]

monitoring web pages for malicious iframes (root kits) without VM is not safe. when its possible to detect virtualization just by javascript, which software provide undetectable VMs ? QEMU is safe?
2
votes
1answer
338 views

Detecting Virtualization from web browser

is that possible active adversaries who injecting malicious iframes (root kits), without Flash, Java or any other plugin detect that we using virtualization by javascript or timing differentials and ...
3
votes
1answer
113 views

Why guest's connections can pass host's firewall?

I've been wondering about this. Assume a host with a strong firewall setup (for example only allowing port 80). That host has some virtual machines without firewall. Why the connections made on ...
14
votes
5answers
941 views

Is a VM only as secure as its host?

Question If one installs a VM with "high security" on a host machine with "low security", will the VM be only as secure as the machine it's installed on, or will the high-security aspects from the VM ...
4
votes
1answer
230 views

VMware server 4.1 -how can I prevent VMs being exposed to each other through VMCI?

I have realized there are issues such as virtual machines being exposed to other VMs within the same system when they're connected to the VMCI socket interface. How do we prevent this ?
5
votes
1answer
665 views

Setting up home lab with Snort and Vyatta - looking for resource recommendations or advice

I'm looking to turn a new desktop (Ubuntu 12.10-64bit) I built into a virtual home lab for testing and experimenting with various security things. The first setup I would like to try running is the ...
5
votes
2answers
458 views

Segmenting Virtual Network Traffic

I have a basic to moderate understanding of VLAN's and their pros and cons as they relate to network segmentation but I'm wondering where to start as one moves into virtualized environments. From a ...
6
votes
2answers
220 views

Firewall on a VM

I know I could use a software firewall on the guest to achieve a situation similar to this, but is there a way to emulate a firewall (protecting multiple Guests) between a host and guests on a ...
1
vote
1answer
189 views

Breaking out of the virtualization layer

Problem So I set up a virtual backtrack machine using VMware Workstation - I'm trying to launch an attack against the host OS (Ubuntu Linux) from the virtualized host (backtrack), but I do not ...
3
votes
1answer
3k views

Full Disk Encryption within a VM, how secure is it?

Just a quick query on basically how to secure a VM for a home computer for a number of uses (such as securing work related data in a good enough fashion whilst in its native environment). I'm not ...
0
votes
3answers
238 views

Using a VM to access internet when malware blocks internet access?

My computer was recently infected by some malware which had blocked internet access. I had a virtualization software with an OS in it. Surprisingly, I could access the internet from the VM. I know ...
0
votes
3answers
77 views

Is there a way to make changes to a virtual machine, test it out, and automatically make same changes to normal machine?

Is there a way to install programs and make changes to a virtual machine and if they work ok have them applied to the "actual" machine? For example in this question when fiasco_averted says "...only ...
3
votes
5answers
2k views

Building a Security Training Simulation environment

My university is keen to build a security training simulation environment/platform and it will be a good learning experience for students. I Googled around to find out how it is built, but I only ...
2
votes
3answers
333 views

Boot or reboot to clean state on Windows each time?

I use virtual box to securely surf the web, but it's easy to get lazy and use the same image more than once. Currently, I have a golden Win 7 image that I built and loaded my required software. I ...
7
votes
1answer
988 views

How isolated are files on a VirtualBox virtual machine from the host filesystem?

When transferring ownership of a computer from one party to another, it's advisable to perform steps to clean out personal data from the hard drive. Depending on needs, the type of data, and/or level ...
-1
votes
1answer
77 views

Configuration for a server [closed]

I would like to configure a server and need guidance in assembling a server. I do not wish to spend much but at the same time I do not wish to compromise on performance. The purpose for my server ...
0
votes
2answers
166 views

Setting up a remote test environment correctly

My setup: - Main Box (connected to network) - VM1 : Linux - VM2 : Windows 7 Both the VMs are running off VM Player and using Bridged: connected directly to the physical network and replicating ...
6
votes
1answer
227 views

How does virtualisation (IaaS) protect from CPU microcode updates and firmware changes?

Is it safe to assume that it's impossible for CPU Microcode updates and firmware updates to be initiated from a guest VM? What software or hardware technologies protect my guest OS from altering or ...
2
votes
1answer
147 views

Why must VMX instructions trap?

What would happen if each of these instructions didn't trap into VMX root when executed in VMX non-root? INVEPT, INVVPID, VMCALL,VMCLEAR, VMLAUNCH, VMPTRLD, VMPTRST, VMREAD, VMRESUME, VMWRITE, ...