New answers tagged

0

The primary defense against vm escape attacks specifically is defense-in-depth. Specifically that if there are varied and plentiful defensive mechanisms in place that an attacker will trigger enough of them that the defender can stop the bad things from happening. Even if an attacker successfully breaks out of one vm in one hyper-visor, there can still be ...


10

Highly customized and patched hypervisors, sandboxes around said hypervisors to mitigate breakouts, and heavy monitoring. Of course, any given server only hosts so many VMs, so a breakout is fundamentally limited to a finite number of guests, if it's able to get past the protections outside the hypervisor. For example, QEMU can be compiled with a hardened ...


1

APT is generally thought of as "Advanced" to the tune that many resources were used in order to attack a target. These resources could be programming (zero day/unseen/sophisticated) threats that are not common among a set of baseline attacks (they used exploit X Y Z). They generally are in the attack/compromise phase for long periods of time, and have ...


-4

Original answer Social engineering is a set of techniques while APT is a type of attack(er). Let me clarify: Social engineering means, targeting the human as the weakest link of the system. This includes attack like phishing, calling support to get information or change passwords, talking to people to get entrance to a restricted area, etc. APT (advanced ...



Top 50 recent answers are included