Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange
The results are in! See what nearly 90,000 developers picked as their most loved, dreaded, and desired coding languages and more in the 2019 Developer Survey.

Questions tagged [isolation]

Any means of preventing data transfer between two systems. Typically this means isolating processes or VMs through sandboxing, or isolating network or physical resources through firewalls or air-gapping.

-1
votes
0answers
38 views

How to implement Browser Isolation? [closed]

I just recently found out about Web Isolation. I also found about the many vendors offering it but I could not find an open source project doing so. So I want to start one. How could a solution like ...
1
vote
2answers
79 views

Secure browsing on any device without limiting the browser

The company I work for has around 500 endpoints spread across several different locations, I have been tasked with finding a solution to allow for secure browsing in this situation. Employees depend ...
0
votes
2answers
63 views

Is AWS subnets enough for segregation of networks? or do we need VPC?

Is AWS subnets enough for segregation of networks with the all security groups? or do we need VPC to really issolate two application from each other?
1
vote
1answer
130 views

Secure architecture for isolated printer network

I am very new to "networking" and security, but I realize that it would be more secure to have printers on their own "isolated network". How do I secure my networked printers? What kind of printers ...
0
votes
0answers
121 views

UEFI Windows 10 Dual-Boot Isolation Questions

On my personal PC, I like to dual-boot Windows 10. I have 2 SSDs and 1 HDD. Windows 10 is installed on each SSD. My PC is setup like this: -1 SSD is encrypted with BitLocker and the HDD is also ...
3
votes
1answer
45 views

Prevent reflecting page modified by browser extension

Suppose there is a trusted browser extension in a chrome browser that modifies the web page (like editing DOM, appending scripts, etc) I don't want anyone but me to see the page modified by this ...
0
votes
1answer
70 views

Would it be possible for a malicious user to change the LAN IP address of an uncompromised device?

I have a local network and an IPCam (with its own storage) in it. Due to some practical limitations, I cannot use technologies such as AP isolation or VLAN to isolate low-integrity and high-integrity ...
1
vote
2answers
137 views

What kind of safety does software isolation (e.g. in operating systems) offer (e.g. between OS and browser)?

What kind of safety does software isolation (e.g. in operating systems) offer (e.g. between OS and browser)? Particularly, what kind of safety mechanisms are there and how secure are they? By ...
1
vote
2answers
148 views

Is a host OS more vulnerable to a hypervisor escape if the guest OS knows the root password to the host?

This is assuming that escaping the hypervisor is the only way the guest OS could compromise the host-- e.g. it's not networked, isn't sharing folders or the clipboard, etc. Does knowledge about the ...
1
vote
1answer
132 views

Islanding vs server lockdown

TL;DR: We're considering disconnecting our manufacturing computers from the outside world. How much less secure would it be to connect them only to a local server, which in turn connected to the ...
4
votes
1answer
52 views

Local server applications using a web frontend on multi-user desktop environments

Currently I have multi-user linux servers where developers access through remote desktop and use the session as work environment. But I'm a bit concerned about the increasing popularity of ...
2
votes
1answer
853 views

What is the easiest way to sandbox an application in a *NIX environment?

I have a significant number of untrusted binary applications that need to be executed on a *nix box. I'm hoping that there might be some simple command/script (e.g. sandbox ./app1953) that could ...
2
votes
0answers
67 views

Allow only single aplication to access files on USB stick with Linux namespaces

It looks like i found a way to allow only single application to access files in USB storage. This script must be run with sudo. #!/bin/bash # create namespace unshare -m<<EOF # mount device ...
2
votes
1answer
101 views

Protecting folder contents from processes

Let's consider the following: Linux is the platform I am referencing here There exists a partition on the system that's encrypted with a strong password (via the LUKS mechanism, if it's relevant to ...
6
votes
1answer
246 views

Do any non-GNU/Linux display managers provide the same isolation as Wayland?

In discussions around the ongoing transition from X.org to Wayland, I regularly come across comments along the lines of "Linux security is not there yet". This refers to Wayland's promise of better (...
2
votes
2answers
2k views

Does Windows Subsystem for Linux provide additional security (VM-like isolation) over running native Windows programs?

On a Windows 10 machine, is it safer to run the Linux version of a browser using Windows Subsystem for Linux instead of running the Windows version? I'm asking because I've read the Wikipedia article ...
4
votes
0answers
66 views

VLAN Device Isolation - Feasibility

To mitigate the risk of malware propagating through a network, how reasonable is it to place each and every device on its own VLAN (complete isolation)? Note: The devices do not need to communicate ...
4
votes
1answer
370 views

Will wireless isolation/AP isolation protect from KRACK?

Will using AP isolation on an Access Point protect connected clients from the KRACK vulnerability on that network?
270
votes
9answers
38k views

What makes Docker more secure than VMs or bare metal?

I recently had a discussion with a Docker expert about the security of Docker vs. virtual machines. When I told that I've read from different sources that it's easier for code running within a Docker ...
25
votes
6answers
4k views

Cheapest and tiniest acoustic isolation for smartphone?

What is the cheapest/convenient way to isolate a mobile phone from recording with microphone? My constraints: The cellphone has to stay in the room, I can't put it outside Maximum 100$ solution Must ...
1
vote
2answers
79 views

Are there tools to isolate protocols on major operating systems?

Isolation is a pretty effective method against malware. There are tools to isolate running code in various ways(qubes-os, bromium, fireglass), i.e. using a micro-vm for each task, either locally or ...
1
vote
1answer
51 views

How to ensure the traffic between vm and host doesn't mix in Windows?

I'm looking forward to using a volatile VM. And according to this source : By default, network address translation (NAT) is configured by the virtualization software such that the guest OS shares ...
3
votes
5answers
576 views

Designing a sandbox or how to “perfectly” isolate an app?

I have been thinking on how an app could be "perfectly" isolated from the rest of the system. Now I know we will never achieve "perfect" in practice, but in theory, how could one go about it? I put ...
0
votes
1answer
4k views

unifi AP how to issolate the guest network

How do I isolate my "Guest" network on my Unifi Access Point(AP) so they can't see all the computers on the network and thereby prohibiting access to our computers/data on other networks on same AP. ...
6
votes
1answer
197 views

VM vs System Call Interposition vs Software Fault Isolation

I have an exe file that I don't trust (maybe its infected with malware). I know that running it in a VM will isolate the exe file from my system, but what about using mechanisms such as System Call ...
4
votes
1answer
103 views

Is there any technology that allows to run code in untrusted environment?

Imagine, your computer is controlled and your traffic is watched (MitM) . For example environment can create a snapshot of process and record a traffic. Is there any chance to run code and prevent it ...
1
vote
2answers
548 views

Isolate Raspberry Pi Server

I am thinking about using a raspberry pi, or some other SBC, to open a simple node.js based web server and a ssh server. I know that when opening ports there are always security vulnerabilities ...
0
votes
1answer
296 views

Level of isolation that Chromium's “Guest Browsing” provides?

When using "add user" in guest browsing, what level of "isolation" does one get? If any? That is, I can log into google or facebook etc multiple times so I assume that at least cookies are separated ...
1
vote
2answers
1k views

If I run an infected DOS .COM file in DOSBox on C: directory will my main OS be damaged?

I want to test some DOS viruses. If I run them from C: will my computer be damaged?
4
votes
2answers
417 views

Sandbox escape of an isolated turing complete language?

Ethereum's Solidity documentation states: The Ethereum Virtual Machine or EVM is the runtime environment for smart contracts in Ethereum. It is not only sandboxed but actually completely isolated, ...
3
votes
2answers
212 views

Why is there no smartphone OS-style app isolation on PC systems?

Smartphones OSes like Android and iOS come with a lot of security features, one of the most useful to me being app isolation. In my understanding, each app installed has a space reserved, and can ...