Skip to main content
The 2024 Developer Survey results are live! See the results

Questions tagged [isolation]

Any means of preventing data transfer between two systems. Typically this means isolating processes or VMs through sandboxing, or isolating network or physical resources through firewalls or air-gapping.

Filter by
Sorted by
Tagged with
0 votes
1 answer
125 views

Is an isolated VM (Hyper-V) still safe despite the fact that the host uses RDP to view/control the VM?

This question is directed towards creating an isolated environment for a reverse engineering VM, where malicious programs will be disassembled, debugged by executing them, so static and dynamic ...
stringExchange's user avatar
1 vote
1 answer
148 views

Existence of sandbox to protect programs from a hostile host

As I understand it, a sandbox is an isolated environment on a machine, used to protect the host from the programs in the sandbox. Is there something similar but in reverse, for running important ...
De kot's user avatar
  • 11
0 votes
0 answers
108 views

alternatives to MDE device isolation for unsupported OS versions

I’ve been exploring options for device isolation within MDE. I have Windows 2008 R2, Windows 2012 (they do not support device isolation at all), Windows 2012 R2, and Windows 2016 (they DO support it, ...
newby88's user avatar
0 votes
0 answers
110 views

How to isolate a bash script process?

I have a bash script that opens various random files that could be anything (PDF, xlsx, MKV, MP4, WebM, html). Since I don't fully trust the source of these files, there is a chance that some of them ...
Arrow Root's user avatar
1 vote
0 answers
220 views

Is using a singularity sandbox an effective way to increase security through isolation / compartmentalization?

I am using singularity sandboxes in my workflow for several reasons unrelated to security. However, after using it a bit, I am now wondering: is using a singularity sandbox an effective way to ...
Zorglub29's user avatar
  • 317
3 votes
2 answers
831 views

Security of untrusted Docker containers

If I want to run untrusted code inside a Docker container, or an untrusted Docker container for that matter, how can I restrict it? I'd like to make sure it has no access to the host filesystem. ...
SRobertJames's user avatar
0 votes
1 answer
3k views

Is there a more convenient, yet safe, way to run DOSBox-X than I'm currently doing it?

I recently learned about DOSBox-X. It's basically a somewhat less awful version of the basically-abandoned DOSBox. I currently have it installed inside a Windows 10 VM inside of my Windows 10 bare ...
Kalo's user avatar
  • 1
0 votes
0 answers
646 views

Why use three routers for security purposes instead of two?

I bought a new router to isolate devices in my network, but then I found that famous Steve Gibdson's Three Dumb Routers episode. I have read the whole transcript but even so I didn't get why only two ...
Mycroft's user avatar
  • 768
1 vote
0 answers
108 views

Isolating permissions available to browser JS via oauth and referer

This proposal concerns a strategy for isolating the permissions given to plugins in a plugin architecture. I'm looking for insight into whether this design can succeed in isolating those permissions. ...
tasteslikelemons's user avatar
1 vote
1 answer
320 views

Does streaming a game from a dedicated gaming VM still expose my PCs to significant privacy/security concerns from installed games?

So the plan is to make a Windows 10 guest, give it lots of vCPUs and memory, perform GPU passthrough to achieve maximal performance, and then load my games onto this guest. The aim of this would be to ...
anotherusername's user avatar
1 vote
1 answer
640 views

How do I isolate/compartmentalize different use cases on one machine?

I have a decently powerful desktop running Windows that I use for 2 different use cases: playing games and storing/processing my personal data. As a security-aware person this makes me uncomfortable. ...
vpskbk8s83hak7df3_ir's user avatar
0 votes
1 answer
149 views

Would putting important information on a flash drive that never touches the internet be secure?

First off, I'm not even sure if this question belongs on this site, but I am a programmer and I usually just ask stack overflow questions like this, and I know for a fact this one doesn't belong there....
Jonah Alexander's user avatar
0 votes
1 answer
636 views

Is a VirtualBox guest isolated from the host?

I have a Linux machine running Kubuntu 20.10. I have installed VirtualBox 6.1. I then created a virtual machine on which I have installed Windows 10. Suppose an hacker enters in my Windows 10 guest. ...
robertspierre's user avatar
1 vote
1 answer
660 views

Linux: Can unprivileged users tamper with processes running under their own identity?

Having the following pseudocode executed by a superuser, is it safe to assume that it is secure on Linux? if fork() == 0: # drop privileges to an unprivileged user, let's say "nobody" #...
1' OR 1 --'s user avatar
0 votes
2 answers
703 views

Is a LAN to LAN with different subnet configuration secure?

I plan to implement the following network configuration : Internet [(cable A)] Router A (192.168.0.x)[(WAN:cable A)(LAN1:cable B)(LAN2:)(LAN3:)(LAN4:)] Router B (192.168.1.x)[(WAN:)(LAN1:cable B)(LAN2:...
pmbonneau's user avatar
  • 201
1 vote
2 answers
289 views

Best Way to Isolate Company Data

I work in a Software Company. Currently, we don't have any security software to secure our data in an employee laptop. Now we want to make a policy where any data stored or created on the company ...
Viki Theolorado's user avatar
2 votes
1 answer
934 views

Ideas for subdomains isolation

Consider a blogging platform - example.com and we want to host untrusted content in subdomain1.example.com and subdomain2.example.com. By default, same origin policy doesn't allow communication ...
user2688214's user avatar
1 vote
1 answer
928 views

Is it safe to disable SATA ports in the BIOS to isolate the corresponding hard drives from malware?

I have three SATA hard drives that I use every day. Suppose I disable the corresponding SATA ports of these hard drives through my BIOS, add another storage device to my PC, install another instance ...
baumlol's user avatar
  • 11
2 votes
0 answers
218 views

Patch management for production servers

I'm trying to implement an automated patching program at a small SaaS provider. When a customer signs up for our software, we provision them a Linux VM in our primary datacenter. Each customer also ...
crab's user avatar
  • 17
2 votes
2 answers
3k views

Hardening VM for Malware Analysis

I'm starting out in Malware Research / Malware Analysis. I am reading a book called "Practical Guide to Malware Analysis," which touches this in the 2nd chapter, before approaching Dynamical Analysis (...
REbegin's user avatar
  • 21
0 votes
0 answers
1k views

Isolate devices on the same network

I asked a similar question on this topic and some guys recommended use VLANs or guest network, so I asked to a friend and he will give to me a router with guest network function. However, there is a ...
Mycroft's user avatar
  • 768
0 votes
0 answers
110 views

standards reference to perimeter security

I have the following problematic that I am currently dealing with. I have two zones/perimeters that need to be interconnected, some standards protocols have to be whitelisted such as HTTP, FTP, SSH ...
Ants0's user avatar
  • 1
1 vote
2 answers
202 views

Secure browsing on any device without limiting the browser

The company I work for has around 500 endpoints spread across several different locations, I have been tasked with finding a solution to allow for secure browsing in this situation. Employees depend ...
Peter_Sw's user avatar
1 vote
2 answers
865 views

Is AWS subnets enough for segregation of networks? or do we need VPC?

Is AWS subnets enough for segregation of networks with the all security groups? or do we need VPC to really issolate two application from each other?
Caglar's user avatar
  • 53
1 vote
1 answer
781 views

Secure architecture for isolated printer network

I am very new to "networking" and security, but I realize that it would be more secure to have printers on their own "isolated network". How do I secure my networked printers? What kind of printers ...
Lance's user avatar
  • 642
3 votes
1 answer
151 views

Prevent reflecting page modified by browser extension

Suppose there is a trusted browser extension in a chrome browser that modifies the web page (like editing DOM, appending scripts, etc) I don't want anyone but me to see the page modified by this ...
kupihleba's user avatar
  • 387
0 votes
1 answer
168 views

Would it be possible for a malicious user to change the LAN IP address of an uncompromised device?

I have a local network and an IPCam (with its own storage) in it. Due to some practical limitations, I cannot use technologies such as AP isolation or VLAN to isolate low-integrity and high-integrity ...
user avatar
2 votes
2 answers
1k views

What kind of safety does software isolation (e.g. in operating systems) offer (e.g. between OS and browser)?

What kind of safety does software isolation (e.g. in operating systems) offer (e.g. between OS and browser)? Particularly, what kind of safety mechanisms are there and how secure are they? By ...
mavavilj's user avatar
  • 129
1 vote
2 answers
266 views

Is a host OS more vulnerable to a hypervisor escape if the guest OS knows the root password to the host?

This is assuming that escaping the hypervisor is the only way the guest OS could compromise the host-- e.g. it's not networked, isn't sharing folders or the clipboard, etc. Does knowledge about the ...
cheers's user avatar
  • 120
1 vote
1 answer
223 views

Islanding vs server lockdown

TL;DR: We're considering disconnecting our manufacturing computers from the outside world. How much less secure would it be to connect them only to a local server, which in turn connected to the ...
Cullub's user avatar
  • 111
4 votes
1 answer
364 views

Local server applications using a web frontend on multi-user desktop environments

Currently I have multi-user linux servers where developers access through remote desktop and use the session as work environment. But I'm a bit concerned about the increasing popularity of ...
sligor's user avatar
  • 41
8 votes
2 answers
15k views

What is the easiest way to sandbox an application in a *NIX environment?

I have a significant number of untrusted binary applications that need to be executed on a *nix box. I'm hoping that there might be some simple command/script (e.g. sandbox ./app1953) that could ...
Stack Tracer's user avatar
3 votes
1 answer
423 views

Allow only single aplication to access files on USB stick with Linux namespaces

It looks like i found a way to allow only single application to access files in USB storage. This script must be run with sudo. #!/bin/bash # create namespace unshare -m<<EOF # mount device ...
anon432's user avatar
  • 31
2 votes
1 answer
375 views

Protecting folder contents from processes

Let's consider the following: Linux is the platform I am referencing here There exists a partition on the system that's encrypted with a strong password (via the LUKS mechanism, if it's relevant to ...
Alex's user avatar
  • 167
9 votes
1 answer
2k views

Do any non-GNU/Linux display managers provide the same isolation as Wayland?

In discussions around the ongoing transition from X.org to Wayland, I regularly come across comments along the lines of "Linux security is not there yet". This refers to Wayland's promise of better (...
lofidevops's user avatar
  • 3,610
8 votes
2 answers
6k views

Does Windows Subsystem for Linux provide additional security (VM-like isolation) over running native Windows programs?

On a Windows 10 machine, is it safer to run the Linux version of a browser using Windows Subsystem for Linux instead of running the Windows version? I'm asking because I've read the Wikipedia article ...
Fabio says Reinstate Monica's user avatar
5 votes
1 answer
536 views

VLAN Device Isolation - Feasibility

To mitigate the risk of malware propagating through a network, how reasonable is it to place each and every device on its own VLAN (complete isolation)? Note: The devices do not need to communicate ...
SheerKahn's user avatar
  • 155
4 votes
1 answer
682 views

Will wireless isolation/AP isolation protect from KRACK?

Will using AP isolation on an Access Point protect connected clients from the KRACK vulnerability on that network?
Daniel's user avatar
  • 151
311 votes
9 answers
57k views

Is Docker more secure than VMs or bare metal?

I recently had a discussion with a Docker expert about the security of Docker vs. virtual machines. When I told that I've read from different sources that it's easier for code running within a Docker ...
Arseni Mourzenko's user avatar
25 votes
6 answers
12k views

Cheapest and tiniest acoustic isolation for smartphone?

What is the cheapest/convenient way to isolate a mobile phone from recording with microphone? My constraints: The cellphone has to stay in the room, I can't put it outside Maximum 100$ solution Must ...
0xmax's user avatar
  • 351
1 vote
2 answers
161 views

Are there tools to isolate protocols on major operating systems?

Isolation is a pretty effective method against malware. There are tools to isolate running code in various ways(qubes-os, bromium, fireglass), i.e. using a micro-vm for each task, either locally or ...
hulkingtickets's user avatar
1 vote
1 answer
136 views

How to ensure the traffic between vm and host doesn't mix in Windows?

I'm looking forward to using a volatile VM. And according to this source : By default, network address translation (NAT) is configured by the virtualization software such that the guest OS shares ...
Freedo's user avatar
  • 2,283
2 votes
5 answers
1k views

Designing a sandbox or how to "perfectly" isolate an app?

I have been thinking on how an app could be "perfectly" isolated from the rest of the system. Now I know we will never achieve "perfect" in practice, but in theory, how could one go about it? I put ...
John Smith's user avatar
0 votes
1 answer
8k views

unifi AP how to issolate the guest network

How do I isolate my "Guest" network on my Unifi Access Point(AP) so they can't see all the computers on the network and thereby prohibiting access to our computers/data on other networks on same AP. ...
omini data's user avatar
5 votes
1 answer
874 views

VM vs System Call Interposition vs Software Fault Isolation

I have an exe file that I don't trust (maybe its infected with malware). I know that running it in a VM will isolate the exe file from my system, but what about using mechanisms such as System Call ...
Zorx's user avatar
  • 51
3 votes
1 answer
192 views

Is there any technology that allows to run code in untrusted environment?

Imagine, your computer is controlled and your traffic is watched (MitM) . For example environment can create a snapshot of process and record a traffic. Is there any chance to run code and prevent it ...
zoonman's user avatar
  • 141
2 votes
2 answers
1k views

Isolate Raspberry Pi Server

I am thinking about using a raspberry pi, or some other SBC, to open a simple node.js based web server and a ssh server. I know that when opening ports there are always security vulnerabilities ...
ManOfPanda's user avatar
0 votes
1 answer
938 views

Level of isolation that Chromium's "Guest Browsing" provides?

When using "add user" in guest browsing, what level of "isolation" does one get? If any? That is, I can log into google or facebook etc multiple times so I assume that at least cookies are separated ...
user1840's user avatar
2 votes
2 answers
3k views

If I run an infected DOS .COM file in DOSBox on C: directory will my main OS be damaged?

I want to test some DOS viruses. If I run them from C: will my computer be damaged?
Coleton O'Donnell's user avatar
4 votes
2 answers
703 views

Sandbox escape of an isolated turing complete language?

Ethereum's Solidity documentation states: The Ethereum Virtual Machine or EVM is the runtime environment for smart contracts in Ethereum. It is not only sandboxed but actually completely isolated, ...
Steve Ellis's user avatar