0

There obvious costs differences between them but I am not sure from a security perspective which of them considered to be more secure.

  • remote is usually virtualized anyway, i.e. running inside some VM on a remote host. So the question should be rather locally or remove virtualized or which underlying virtualization technique is used (i.e. different VM hypervisors, only container ...) – Steffen Ullrich Mar 18 at 17:01
  • webgap.io/learning/virtualization-based-browser-isolation.html - You can see these guys offer some solution that is different than virtualized. – Filopn Mar 18 at 17:02
  • 1
    @Filopn That's a marketing piece if I ever read one. Containerisation is basically the same thing as virtualisation, but it trades (potentially) better performance for lesser security guarantees. – Polynomial Mar 18 at 17:06
  • 1
    The problem is that the two approaches aren't really distinct and the security properties instead largely arise from the implementation details, which vary across solutions. – Polynomial Mar 18 at 17:14
  • 1
    @Filopn: in short: no isolation is the worst. Isolation by sandboxes is better but costs more resources. Isolation by containers is even better and costs even more resources. Isolation by VM is again better and costs again more resources. And isolation by hardware is even better and costs even more resources. Of course, implementation details are relevant and might actually more security technologies to behave less secure. – Steffen Ullrich Mar 18 at 17:18
1

In short: no isolation is the worst. Isolation by sandboxes is better but costs more resources. Isolation by containers is even better and costs even more resources. Isolation by VM is again better and costs again more resources. And isolation by hardware is even better and costs even more resources. Of course, implementation details are relevant and might actually cause more secure technologies to behave less secure.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.