Virtualization is the creation of a virtual (rather than actual) version of something, such as an operating system, a server, a storage device or network resources.

learn more… | top users | synonyms

4
votes
1answer
2k views

Physical machines not detected from a Backtrack VM

Some time back I asked about using metasploit on a virtual machine here. This question is a kind of 'part 2' of it. My test bed set up consists of 3 physical machines: A, B and C. Each of them have ...
4
votes
1answer
62 views

Design differences of tails and whonix concerning virtualization

Tails and Whonix both can run in VirtualBox. Tails doesn't recommends it for security reasons (https://tails.boum.org/doc/advanced_topics/virtualization/index.en.html), for Whonix it seems to be a ...
4
votes
1answer
516 views

Is it possible to detect host-machine of my virtual-machines?

So basically I need to know is there any way to find a connection (or relation) between packets sent by my VMs and my host machine. In my lab I have lots of workstations, each running a VirtualBox ...
4
votes
2answers
641 views

Can a malware jump from a virtual to the physical machine? [duplicate]

Possible Duplicate: How secure are virtual machines really? False sense of security? I found out that malware authors check if the hard drive volume name, or network card MAC matches ...
4
votes
1answer
542 views

VPS Safety in the Cloud

Imagine you are running a web server on a Virtual Private Server (VPS) hosted in a datacenter. Could the people running the datacenter covertly read files from my VPS's hard disk? Could an attacker ...
4
votes
1answer
246 views

VMware server 4.1 -how can I prevent VMs being exposed to each other through VMCI?

I have realized there are issues such as virtual machines being exposed to other VMs within the same system when they're connected to the VMCI socket interface. How do we prevent this ?
3
votes
4answers
3k views

Is dual-booting an OS more or less secure than running a virtual machine?

I run two operating systems on two separate disk partitions on the same physical machine (a modern MacBook Pro). In order to isolate them from each other, I've taken the following steps: Configured ...
3
votes
4answers
447 views

Shared hosting vs VPS

I have an Asp.net site. Which hosting system do I need to secure it adequately* against anyone reading private information that's on the server? This is assuming I'm not worried about the sysadmins ...
3
votes
5answers
3k views

Building a Security Training Simulation environment

My university is keen to build a security training simulation environment/platform and it will be a good learning experience for students. I Googled around to find out how it is built, but I only ...
3
votes
2answers
530 views

Instrumentation vs virtual machine introspection

I cannot differentiate between Instrumentation and Virtual machine introspection. Since the goal of Virtual Machine introspection is to examine the properties of a target through virtual machine ...
3
votes
1answer
114 views

Why guest's connections can pass host's firewall?

I've been wondering about this. Assume a host with a strong firewall setup (for example only allowing port 80). That host has some virtual machines without firewall. Why the connections made on ...
3
votes
4answers
3k views

Reboot to clean state daily, on Windows

I already know that this can be done on Linux, One can boot to a flash drive that is write protected. Live modify folders can be symlinked to to a swap partition, and this prevents viruses from being ...
3
votes
1answer
295 views

Is there a way to use multiple firewalls / antivirus for penetration testing?

I don't really know how to do either, but I was wondering if it was possible to have multiple firewalls / virus scanners installed at once, and use a 3rd party program to specify which one is running ...
3
votes
2answers
111 views

What are ways I can analyze malware in an infected machine, not just clean it?

I often run into infected devices in my environment and would like to learn more about the specific infections that have gotten in. What are the best tools and techniques I could use to do this? I ...
3
votes
3answers
260 views

Why Parallels 8 installer looking into my Chrome's Cookies?

While trying to install Parallels on OS X I looked into Activity Monitor to find where is the installed Parallels located (it was weird that it stays invisible in Application folder). And than I found ...
3
votes
1answer
304 views

How do I use Windows 7 virtualization features to prevent transitive trust of admin credentials?

I am exploring using VMs to separate my administrative actions from standard user actions in Windows 7. The goal is to limit my risk and exposure when using "RunAs" to open an application or file ...
3
votes
3answers
450 views

Backup personal email on VPS - privacy, security and trust risks

FastMail.fm hosts my personal email account. Now they claim to have reliable backup services, but I'd like to have my own copy of my email archives. What I'd like to do is back up to my VPS, which ...
3
votes
3answers
559 views

Is vlan considered a security feature? [duplicate]

Possible Duplicate: Why do people tell me not to use VLANs for security? This topic came up in a discussion about network infrastructure, where a company had moved from separate physical ...
3
votes
3answers
4k views

Replacement for DVL (Damn Vulnerable Linux)?

I've recently spotted that DVL (Damn Vulnerable Linux) has gone inactive. My first question is what happened to cause them to stop releasing it? Secondly, I have found some references to other ...
3
votes
1answer
645 views

Isolate a Virtualbox VM from local network [closed]

I have the need to isolate a virtual machine created with Virtualbox from the local network but I need to provide internet access to that machine. It is the first time that I face this kind of ...
3
votes
1answer
260 views

How secure is to store encryption keys or SSH Keys on LPAR?

I want to store SSH keys (used to connect to some devices that have sensitive data) and the encryption/decryption keys of a database application. They will be inside a LPAR (logical partition) in our ...
3
votes
2answers
700 views

Can a virtual machine program view a host machine's connections?

I don't really know anything about computers. I need to run a virtual Windows machine inside an Ubuntu system. My current setup uses a stripped down version of Windows XP on VirtualBox. I intend to ...
3
votes
1answer
72 views

Can you securely allow users to create VM's on their workstations

I've moved from a job where developers were encouraged to use technologies like docker and vagrant to create VM's on their workstations for testing and development. At my new job, the IT manager ...
3
votes
1answer
237 views

What are the tradeoffs in cost, effort, and value in moving a database server to a virtualized DMZ environment?

I am quite new to the DMZ concept and working on a project as part of my master thesis where Remote access is required for the Development environment. However, there is a functional requirement for ...
2
votes
5answers
1k views

How will microvirtualisation change the security field, if at all?

Will this reduce the number of exploitable vulnerabilities in common operating systems? Will the only path in be to exploit the VM itself? Marketing blurb from Bromium's website below. ... ...
2
votes
2answers
437 views

Security Risks Involved in Deploying Win Server 2008 on a Linux host

The Question: Are there any major security risks I should be concerned about, caused by installing Windows Server 2008 R2 onto a Linux Host in VirtualBox? I run an Ubuntu box, with a fully-secured ...
2
votes
3answers
559 views

Can I use 777 file permissions inside server virtualisation (that only I have access to) without worry?

For this question, please assume I have followed every possible security measure to secure my Linux server. Only I have access to the web server via one open SSH port. If there are security issues ...
2
votes
2answers
413 views

How can I protect content distributed on a linux virtual machine?

What assets am I trying to protect? An unofficial pre-alpha software prototype provided as a reproducible example for evaluation during the scientific peer-review process. The software will be ...
2
votes
1answer
106 views

How to detect when your RAM is being copied or scanned by a hypervisor

I am working in a Virtual Machine that is on a ESXi server on a remote machine. I am not the only one who has access to the ESXi and others could take memory snapshots of my running VM. Is there a way ...
2
votes
2answers
262 views

Does a VM keylogger listen to the keyboard activities of the host?

I am running a Windows XP virtual machine on a Windows XP host machine. I use the VM for suspicious websites and software/applications. In the case a kaylogger will be installed on my VM: will this ...
2
votes
2answers
547 views

I've just purchased a VPS to use for developing and managing my clients hosting packages. What necessary steps do I have to take?

The VPS is running CentOS and I have full access. I only looked around using the cPanel installation and already disabled anonymous FTP access. What other security risks are there with a default VPS ...
2
votes
2answers
1k views

Can an unprivileged process in a hardware-virtualized system cause a `VMExit` without cooperation from the kernel?

For SVM or VT-x, the set of conditions which trigger a vmexit to the virtual machine monitor is pretty complex. Can an unprivileged process trigger any of these without assistance from the kernel? ...
2
votes
1answer
42 views

Virtualisation: security on the host side

Virtualised environments are focused on isolating the guest OS. Using the VirtualBox model, the guest might be behind a virtual NAT and/or talk only with other VMs via internal networks, and only ...
2
votes
3answers
446 views

Suspicious VMWare connections that bypass firewall

I'm running VMWare 5 and I have found that when I start up VMWare I see two connections: TCP 10.100.100.161:55555->as-40816.engx.vmware.com:https (ESTABLISHED) TCP ...
2
votes
1answer
297 views

How are IaaS Virtual Machines Isolated?

I am currently examining Hypervisor firewalls for my graduate thesis, but I unfortunately don't have a lot of experience with IaaS environments. How are IaaS Virtual Machines network isolated from ...
2
votes
2answers
319 views

Using a virtual machine as a buffer between USB media and OS

I was directed here from the Unix & Linux site. I've gone through some of the related questions, but they seem to be more concerned about whether a guest OS can access the host OS in someway. ...
2
votes
1answer
153 views

Why must VMX instructions trap?

What would happen if each of these instructions didn't trap into VMX root when executed in VMX non-root? INVEPT, INVVPID, VMCALL,VMCLEAR, VMLAUNCH, VMPTRLD, VMPTRST, VMREAD, VMRESUME, VMWRITE, ...
2
votes
1answer
1k views

VMWare Fusion Encryption and Snapshotting

VMWare Fusion 5 has an encryption feature that I have enabled, with what I would consider a hard-to-brute-force-crack password. How secure is the data in this VM? If I shut down the VM each time ...
2
votes
3answers
300 views

Find changes and modifications made to system by application or virus,

I would like to use either Hyper-V or Vmware to take a Clean Base snapshot and a snapshot after an application or virus has made changes so I can then see what was changed between the two images. ...
2
votes
1answer
279 views

Windows 8 in a VDI environment and the use of Secure Boot

I have a question, How would secure boot be implemented in a virtulized environment, say XEN hypervisor with multiple guest OS's including Windows 8 guest VM? does the guest VM need access to the ...
2
votes
2answers
7k views

aircrack-ng under Win7 — possible?

What needs to be installed to get the full aircrack-ng suite (or the closest possible equivalent) working under Win7? Should you use VirtualPC, VirtualBox, or VMware Workstation for this? Should you ...
2
votes
2answers
91 views

Can a virtual machine be used instead of the host?

I was thinking of using a Debian guest as my main 'host' instead of my actual host (Ubuntu). Do you think this will have any advantages in terms of making it difficult for digital forensics to ...
2
votes
1answer
70 views

Can a malicious user do any harm using /dev/kvm?

I'd like to know if giving access to Intel version of /dev/kvm on Linux to a user that just wants to spawn VMs gives him any extra privileges. That is, are her VMs subject to process scheduling just ...
2
votes
1answer
394 views

Detecting Virtualization from web browser

is that possible active adversaries who injecting malicious iframes (root kits), without Flash, Java or any other plugin detect that we using virtualization by javascript or timing differentials and ...
2
votes
3answers
408 views

Boot or reboot to clean state on Windows each time?

I use virtual box to securely surf the web, but it's easy to get lazy and use the same image more than once. Currently, I have a golden Win 7 image that I built and loaded my required software. I ...
2
votes
1answer
610 views

VMware Workstation 9 Security Best Practice Guides

Could someone please be able point me in the direction of where I could find some best practice security guides for VMware Workstation 9 please? I've searched the VMware site and to say it's badly ...
2
votes
1answer
318 views

Security of LXC compared to OpenVZ

For years, I'm now using OpenVZ on my server, but support discontinued for Debian and Ubuntu, current releases seem to focus on LXC now, which is not a bad idea from the point of comfort. But what ...
2
votes
0answers
97 views

Enabling virutalization, addressing the bluepill risk?

Background to this question is the ambivalence I assume with virtualization. Also to start directly with clarity: the term bluepill should here be a placeholder to denote "malware that uses ...
2
votes
0answers
92 views

How does Travis CI protect itself against being used for attacks?

Travis CI allows anyone to run any code on their servers by checking it into GitHub. How do they ensure that someone isn't taking advantage of their servers to launch an attack or other malicious ...
1
vote
1answer
209 views

Breaking out of the virtualization layer

Problem So I set up a virtual backtrack machine using VMware Workstation - I'm trying to launch an attack against the host OS (Ubuntu Linux) from the virtualized host (backtrack), but I do not ...