Virtualization is the creation of a virtual (rather than actual) version of something, such as an operating system, a server, a storage device or network resources.
39
votes
6answers
12k views
How secure are virtual machines really? False sense of security?
I was reading this CompTIA Security+ SYO-201 book, and the author Prowse claims that
Whichever VM you select, the VM cannot cross the software boundaries set in
place. For example, a virus might ...
16
votes
4answers
4k views
Does a Virtual Machine stop malware from doing harm?
I would like to know if it is save for the host system of a virtual machine (VM - VirtualBox OSE in my case) to execute malware.
Can a virus break out and read or write data from the host system? ...
34
votes
5answers
2k views
Is it safe to install malware in a VM
Is it safe to install malware in virtual machines? I would like to investigate malware, but I don't want to infect my own computer.
Can I install the malware in a VMWare VM, maybe even without ...
10
votes
8answers
4k views
How anonymous is my setup?
my friend and I are trying to make the most anonymous setup for a computer to do things across the internet without being known the location from which it came.
Our setup is as follows:
A windows ...
12
votes
5answers
551 views
Are there ways to protect the guest kernels at the hypervisor level?
Let's say I have a linux guest running in xen and I want xen to check the integrity of the guest kernel so that I know there aren't any rootkits, or similar, active.
Is there a way to accomplish this ...
2
votes
1answer
2k views
How to ensure that VirtualBox guests can't break out of the vm to get access to the host machine? [duplicate]
Possible Duplicate:
How secure are virtual machines really? False sense of security?
E.g. on Ubuntu/Fedora - if I have VirtualBox installed and I'm running guests in it, then how can I make ...
7
votes
5answers
3k views
How to detect hosts running in virtual machines with nmap?
I have to determine if a given subnet has virtual hosts.
Are there any ideas about what switches to use?
6
votes
4answers
1k views
What do I need to configure, to make sure my software uses /dev/urandom?
When setting up a server, what configuration changes do I need to make sure that all of the software uses /dev/urandom instead of /dev/random?
Some servers don't have much entropy in the entropy pool ...
4
votes
4answers
355 views
Obtaining the IP address of a virtual machine to use Metasploit
I am beginning to learn Metasploit and, to play safe, am practicing it out on a virtual machine.
The target machine, which is a virtual machine, is under NATing. How do I access it/ connect to it- ...
7
votes
3answers
350 views
Virtualization as a layer of security for desktop computers?
Given the amount of 3rd party plugins required to browse the web, I've been compelled to virtualize my online habits to gain an additional layer of security.
There is of course some obvious ...
4
votes
2answers
352 views
Memory Dumping - Cause for concern in Virtualization?
Recently, I started exploring threats to Virtual machines in general. The first question that popped into my head was whether a host machine can dump its entire memory onto a file, and inspect the ...
3
votes
1answer
225 views
How do I use Windows 7 virtualization features to prevent transitive trust of admin credentials?
I am exploring using VMs to separate my administrative actions from standard user actions in Windows 7. The goal is to limit my risk and exposure when using "RunAs" to open an application or file ...
8
votes
2answers
428 views
Protection of Keys/Passwords on Virtual Hardware (XEN, KVM, VMWare, etc.)
Is there any reasonable way to secure data on virtual hardware? What I mean by "virtual hardware" is the various hosted systems that one can rent from various online hosters, that run on top of XEN, ...
5
votes
2answers
818 views
Breaking out of a strict linux sandbox running virtually under windows: do the linux-sandbox access control policies even matter?
I am developing an application which will run untrusted code. I have been designing it for linux, thinking that I can just run it in a virtual machine on windows when the need arises. The linux ...
5
votes
5answers
379 views
Is there a way to identify the host of a malicious VM from across the network?
Scenario:
Someone is attacking your network. However, they're not exactly using their machine to do it - they're using a VM running on their system. The VM's network adapter is configured in ...
