Virtualization is the creation of a virtual (rather than actual) version of something, such as an operating system, a server, a storage device or network resources.

learn more… | top users | synonyms

5
votes
2answers
2k views

Security of LXC compared to OpenVZ

For years, I'm now using OpenVZ on my server, but support discontinued for Debian and Ubuntu, current releases seem to focus on LXC now, which is not a bad idea from the point of comfort. But what ...
5
votes
1answer
915 views

Setting up home lab with Snort and Vyatta - looking for resource recommendations or advice

I'm looking to turn a new desktop (Ubuntu 12.10-64bit) I built into a virtual home lab for testing and experimenting with various security things. The first setup I would like to try running is the ...
5
votes
2answers
576 views

Segmenting Virtual Network Traffic

I have a basic to moderate understanding of VLAN's and their pros and cons as they relate to network segmentation but I'm wondering where to start as one moves into virtualized environments. From a ...
4
votes
2answers
2k views

Can a kernel exploit compromise an OpenVZ host?

as openvz runs a a lot of virtual servers. i wonder how kernel-exploits could affect the whole system. would it be possible to break out of a "virtual machine" with a kernel-exploit on openvz??? ...
4
votes
3answers
388 views

What are the security precautions taken to ensure a virtualized domain can't compromise its host

I recently started learning about xen and became more interested in visualization. I read a few whitepapers, did a search here, but couldn't find an answer. My guess is someone will link me to some ...
4
votes
4answers
549 views

Is packet sniffing a risk on VPS? If so, what precautions should I ask my host if they take?

I'm wondering if packet sniffing is a risk on my VPS. Is it always a risk or are their precautions a host vendor can take? e.g. a switched network etc. If I wanted to ask my host what precautions ...
4
votes
1answer
132 views

How to secure application VM?

This question is derived from my previous question on Isolating Web application where two approaches were recommended. Apache Chroot Jail Isolation through Virtualization My question is if one of ...
4
votes
1answer
2k views

Physical machines not detected from a Backtrack VM

Some time back I asked about using metasploit on a virtual machine here. This question is a kind of 'part 2' of it. My test bed set up consists of 3 physical machines: A, B and C. Each of them have ...
4
votes
1answer
91 views

VM production server and low entropy

I'm monitoring a VM functioning as our production server. I noticed it has at many times, quite low entropy (/proc/sys/kernel/random/entropy_avail). On average our server(which among other stuff does ...
4
votes
1answer
84 views

Design differences of tails and whonix concerning virtualization

Tails and Whonix both can run in VirtualBox. Tails doesn't recommends it for security reasons (https://tails.boum.org/doc/advanced_topics/virtualization/index.en.html), for Whonix it seems to be a ...
4
votes
1answer
585 views

Is it possible to detect host-machine of my virtual-machines?

So basically I need to know is there any way to find a connection (or relation) between packets sent by my VMs and my host machine. In my lab I have lots of workstations, each running a VirtualBox ...
4
votes
2answers
699 views

Can a malware jump from a virtual to the physical machine? [duplicate]

Possible Duplicate: How secure are virtual machines really? False sense of security? I found out that malware authors check if the hard drive volume name, or network card MAC matches ...
4
votes
1answer
815 views

VPS Safety in the Cloud

Imagine you are running a web server on a Virtual Private Server (VPS) hosted in a datacenter. Could the people running the datacenter covertly read files from my VPS's hard disk? Could an attacker ...
4
votes
1answer
261 views

VMware server 4.1 -how can I prevent VMs being exposed to each other through VMCI?

I have realized there are issues such as virtual machines being exposed to other VMs within the same system when they're connected to the VMCI socket interface. How do we prevent this ?
3
votes
4answers
587 views

Shared hosting vs VPS

I have an Asp.net site. Which hosting system do I need to secure it adequately* against anyone reading private information that's on the server? This is assuming I'm not worried about the sysadmins ...
3
votes
5answers
3k views

Building a Security Training Simulation environment

My university is keen to build a security training simulation environment/platform and it will be a good learning experience for students. I Googled around to find out how it is built, but I only ...
3
votes
2answers
573 views

Instrumentation vs virtual machine introspection

I cannot differentiate between Instrumentation and Virtual machine introspection. Since the goal of Virtual Machine introspection is to examine the properties of a target through virtual machine ...
3
votes
1answer
116 views

Why guest's connections can pass host's firewall?

I've been wondering about this. Assume a host with a strong firewall setup (for example only allowing port 80). That host has some virtual machines without firewall. Why the connections made on ...
3
votes
4answers
3k views

Reboot to clean state daily, on Windows

I already know that this can be done on Linux, One can boot to a flash drive that is write protected. Live modify folders can be symlinked to to a swap partition, and this prevents viruses from being ...
3
votes
1answer
299 views

Is there a way to use multiple firewalls / antivirus for penetration testing?

I don't really know how to do either, but I was wondering if it was possible to have multiple firewalls / virus scanners installed at once, and use a 3rd party program to specify which one is running ...
3
votes
2answers
243 views

What are ways I can analyze malware in an infected machine, not just clean it?

I often run into infected devices in my environment and would like to learn more about the specific infections that have gotten in. What are the best tools and techniques I could use to do this? I ...
3
votes
3answers
260 views

Why Parallels 8 installer looking into my Chrome's Cookies?

While trying to install Parallels on OS X I looked into Activity Monitor to find where is the installed Parallels located (it was weird that it stays invisible in Application folder). And than I found ...
3
votes
1answer
316 views

How do I use Windows 7 virtualization features to prevent transitive trust of admin credentials?

I am exploring using VMs to separate my administrative actions from standard user actions in Windows 7. The goal is to limit my risk and exposure when using "RunAs" to open an application or file ...
3
votes
3answers
592 views

Is vlan considered a security feature? [duplicate]

Possible Duplicate: Why do people tell me not to use VLANs for security? This topic came up in a discussion about network infrastructure, where a company had moved from separate physical ...
3
votes
3answers
480 views

Backup personal email on VPS - privacy, security and trust risks

FastMail.fm hosts my personal email account. Now they claim to have reliable backup services, but I'd like to have my own copy of my email archives. What I'd like to do is back up to my VPS, which ...
3
votes
1answer
732 views

Isolate a Virtualbox VM from local network [closed]

I have the need to isolate a virtual machine created with Virtualbox from the local network but I need to provide internet access to that machine. It is the first time that I face this kind of ...
3
votes
1answer
267 views

How secure is to store encryption keys or SSH Keys on LPAR?

I want to store SSH keys (used to connect to some devices that have sensitive data) and the encryption/decryption keys of a database application. They will be inside a LPAR (logical partition) in our ...
3
votes
2answers
739 views

Can a virtual machine program view a host machine's connections?

I don't really know anything about computers. I need to run a virtual Windows machine inside an Ubuntu system. My current setup uses a stripped down version of Windows XP on VirtualBox. I intend to ...
3
votes
2answers
127 views

Is VM per service a reasonable server security model?

Let's say I am hosting several services on my server, for instance, email and a web page. I am concerned that the web server software may have unknown vulnerabilities in it, which will allow an ...
3
votes
1answer
90 views

Can you securely allow users to create VM's on their workstations

I've moved from a job where developers were encouraged to use technologies like docker and vagrant to create VM's on their workstations for testing and development. At my new job, the IT manager ...
3
votes
1answer
249 views

What are the tradeoffs in cost, effort, and value in moving a database server to a virtualized DMZ environment?

I am quite new to the DMZ concept and working on a project as part of my master thesis where Remote access is required for the Development environment. However, there is a functional requirement for ...
3
votes
1answer
66 views

“Memory Sinkhole” attack and virtual machines?

Recently a design flaw in some Intel X86 processors was revealed at Blackhat. The flaw enables malicious code to gain access to SMM. The flaw can be exploited by an attacker with administrator ...
3
votes
0answers
132 views

Enabling virutalization, addressing the bluepill risk?

Background to this question is the ambivalence I assume with virtualization. Also to start directly with clarity: the term bluepill should here be a placeholder to denote "malware that uses ...
3
votes
0answers
113 views

How does Travis CI protect itself against being used for attacks?

Travis CI allows anyone to run any code on their servers by checking it into GitHub. How do they ensure that someone isn't taking advantage of their servers to launch an attack or other malicious ...
2
votes
5answers
1k views

How will microvirtualisation change the security field, if at all?

Will this reduce the number of exploitable vulnerabilities in common operating systems? Will the only path in be to exploit the VM itself? Marketing blurb from Bromium's website below. ... ...
2
votes
3answers
2k views

VPS Privacy: OpenVZ vs KVM vs Xen

Considering OpenVZ, KVM and Xen: Which VM technology is the most difficult for the host's administrators to access given an encrypted root partition? Can I have a reasonable expectation that rogue ...
2
votes
2answers
487 views

Security Risks Involved in Deploying Win Server 2008 on a Linux host

The Question: Are there any major security risks I should be concerned about, caused by installing Windows Server 2008 R2 onto a Linux Host in VirtualBox? I run an Ubuntu box, with a fully-secured ...
2
votes
3answers
656 views

Can I use 777 file permissions inside server virtualisation (that only I have access to) without worry?

For this question, please assume I have followed every possible security measure to secure my Linux server. Only I have access to the web server via one open SSH port. If there are security issues ...
2
votes
2answers
470 views

How can I protect content distributed on a linux virtual machine?

What assets am I trying to protect? An unofficial pre-alpha software prototype provided as a reproducible example for evaluation during the scientific peer-review process. The software will be ...
2
votes
3answers
407 views

Completely encrypting virtual machine (for free) [closed]

I know in VMware workstation there's the option to encrypt a virtual machine. Is there a free way to do this without VMware workstation? I'm aiming for the fullest encryption and encapsulation ...
2
votes
3answers
846 views

How secure is VirtualBox for privacy/anonymity? [closed]

Is it possible that Oracle places backdoors in VirtualBox that compromise a user's privacy/anonymity? For example, is running Whonix through VirtualBox a secure set up if your host OS is unencrypted? ...
2
votes
1answer
135 views

How to detect when your RAM is being copied or scanned by a hypervisor

I am working in a Virtual Machine that is on a ESXi server on a remote machine. I am not the only one who has access to the ESXi and others could take memory snapshots of my running VM. Is there a way ...
2
votes
2answers
323 views

Does a VM keylogger listen to the keyboard activities of the host?

I am running a Windows XP virtual machine on a Windows XP host machine. I use the VM for suspicious websites and software/applications. In the case a kaylogger will be installed on my VM: will this ...
2
votes
2answers
595 views

I've just purchased a VPS to use for developing and managing my clients hosting packages. What necessary steps do I have to take?

The VPS is running CentOS and I have full access. I only looked around using the cPanel installation and already disabled anonymous FTP access. What other security risks are there with a default VPS ...
2
votes
2answers
1k views

Can an unprivileged process in a hardware-virtualized system cause a `VMExit` without cooperation from the kernel?

For SVM or VT-x, the set of conditions which trigger a vmexit to the virtual machine monitor is pretty complex. Can an unprivileged process trigger any of these without assistance from the kernel? ...
2
votes
2answers
101 views

Is creating a network bridge in order to connect a virtual machine to the internet insecure?

I have created a virtual machine using Hyper-V running OpenSUSE 13.2. In order to get an Internet connection on the virtual OS I created an external virtual switch. Windows 8.1 then automatically ...
2
votes
1answer
45 views

Virtualisation: security on the host side

Virtualised environments are focused on isolating the guest OS. Using the VirtualBox model, the guest might be behind a virtual NAT and/or talk only with other VMs via internal networks, and only ...
2
votes
3answers
502 views

Suspicious VMWare connections that bypass firewall

I'm running VMWare 5 and I have found that when I start up VMWare I see two connections: TCP 10.100.100.161:55555->as-40816.engx.vmware.com:https (ESTABLISHED) TCP ...
2
votes
1answer
317 views

How are IaaS Virtual Machines Isolated?

I am currently examining Hypervisor firewalls for my graduate thesis, but I unfortunately don't have a lot of experience with IaaS environments. How are IaaS Virtual Machines network isolated from ...
2
votes
1answer
57 views

Boot Attacks possible on encryption keys used in virtual machines

Is it possible for an attacker to restore passwords or encryption keys that one has used in a virtual machine the same way like restoring keys that have been used in a standard system applying a boot ...