Questions tagged [virtualization]
Virtualization is the creation of a virtual (rather than actual) version of something, such as an operating system, a server, a storage device or network resources.
486
questions
0
votes
0
answers
57
views
What kind of USB-based attacks can be prevented by a VM?
The answer provided to this question by forest has a good summary explaining the types of attacks that a malicious USB can do.
Does USB redirection in a VM provide any protection against any of these ...
0
votes
0
answers
19
views
pfSense not working properly on Azure VNet? What do i do?
I'm currently working on a project based on creating virtual networks and configuring a virtualized firewall (pfSense) along with access control. I was given this project idea in a cybersecurity ...
- 111
0
votes
1
answer
104
views
Security considerations and differences between Bare metal and Virtualization
I'm currently working on a server. This server is meant to be converged, as in be my storage server and the place publicly accessible services run on. Services like some API's in docker or k8s and ...
- 103
0
votes
1
answer
89
views
How to know if you have downloaded a malware on a virtual machine [duplicate]
First, I'm a complete beginner, my only experience in malware is running windows defender lol. But I will try my best to learn anything that you guys recommend.
My younger brother keeps downloading ...
0
votes
0
answers
38
views
What is the best way to spin up vulnerable machines for training purposes? [duplicate]
I am trying to realize which is the best option to have somewhere installed vulnerable virtual machines and run them whenever you want for Pentest training or other cloudtesting purposes.
Maybe this ...
- 157
0
votes
1
answer
231
views
user namespaces: do they increase security, or introduce new attack surface?
user namespaces in Linux are presented as a security feature, which should increase security. But is this really true?
Is it possible that while user namespaces fix one kind of problem, they introduce ...
- 2,129
1
vote
1
answer
143
views
Would my hypothetical Opsec setup with the goal of compartmentalizing sensitive areas from an insecure sandbox be sensible?
The root cause of my problem stems from the fact that I need to run untrustworthy software on a bare metal windows machine, which means that I can't just have it in a VM because of major performance ...
0
votes
0
answers
82
views
How to ensure safety while visiting malicious links in a VM? [duplicate]
Just wanted to ask how dangerous would it be to visit malicious links in a VM? The reason why I want to do this is to test out a tool I wrote that identifies malicious links from a database and ...
0
votes
0
answers
25
views
can host read inside the VM? [duplicate]
I have to run private operations in a VM which runs on the enemy's host (don't ask why).
I'm wondering to what extend (if possible at all) I can have a configuration such that the host cannot read ...
3
votes
3
answers
276
views
Is it possible for a malware in a VM to be still running after the VM is shut down?
Let's say that VMWare or VirtualBox is running the newest version of Debian. I'm not sure if it's possible for any program in the guest to continue running, stealing data from the host, even after the ...
- 217
2
votes
1
answer
229
views
Does connecting a virtual machine to a guest wifi connection protect the host machine from potential malware if it is connected to the main network?
I have a windows 10 host machine that is connected to my LAN with other devices. It runs a VMware Ubuntu virtual machine that is connected to the guest wifi and has shared folders between vm and host ...
- 21
0
votes
0
answers
680
views
How do I recklessly browse the web, download suspicious files and run them with as low a risk as possible? [duplicate]
I have recently found out about the existence of virtual machines they can be used to run viruses in an isolated environment from the host computer, like virtual box, vmware and sandboxie. However, I'...
- 1
1
vote
1
answer
220
views
Does using a Hyper-V Ubuntu VM add more security when web browsing?
I've always been concerned that my casual browsing of the web directly from Windows 10 could infect my PC.
How much added security (if any) could be obtained by using Hyper-V to run an Ubuntu 22.04 ...
1
vote
0
answers
123
views
Was the kernel I used vulnerable/deprecated?
Background Information
As I developer I am running multiple (partly virtual-)machines with Debian GNU/Linux and on some of these machines I work with highly confidential documents or dangerous ...
- 11
0
votes
0
answers
143
views
OSSIM logs and disk space?
I've installed OSSIM (no USM) on a VM and am trying to figure out how much disk space I need to give this VM. Basically does anyone know:
How can I estimate how much disk the logs are using each day? ...
0
votes
1
answer
163
views
What are the best security practices when when using VirtualBox on Windows 11 with an old OS?
Got a cheap new laptop to play old games with a VM of Windows XP/7, with the host being Windows 11.
Using a WiFi that isn't my own (as I don't plan on connecting to the internet with this laptop) I ...
- 1
3
votes
1
answer
317
views
AMD SEV - attack through the hypervisor console
AMD SEV enables creating a trusted encrypted VM where the memory of the whole VM is encrypted using cryptographic keys and features on the CPU and thus not visible to the cloud provider (in theory if ...
- 31
3
votes
1
answer
80
views
Security advanatages to running a webapp inside a container, which is ALSO inside a vm?
I am doing some security consulting for a client who intends on deploying a Ruby on Rails web application. I am trying to ascertain a couple of different things...
Is it any more secure to run an ...
- 256
0
votes
1
answer
105
views
Keylogging virtual machine from host
Can a keylogger in a host machine capture keystrokes in virtual OS?
I'd like to get into cryptocurrencies but I don't know if my machine (mac) is secure. So I thought I could create a VM for it but I ...
2
votes
1
answer
545
views
How can a typical researcher protect against VM escapes?
I read a similar question here on how large companies protect themselves and became intrigued about how this would transfer over to less significant operation (ie security researcher, small company, ...
- 1,316
3
votes
0
answers
2k
views
When using VirtualBox, is it better to use the VirtualBox encryption or the OS disk encryption?
VirtualBox has an option to encrypt the drive of a VM.
When I installed Debian or Ubuntu, I have the option to say that I want the full disk encrypted.
I'm thinking that both do pretty much the same ...
- 987
0
votes
1
answer
351
views
How to store malware for analysis?
I am planning on analysing some malware samples dynamically using a sandbox tool and a target Windows VM. The host (physical machine) runs Ubuntu and in it are the sandbox and target VM.
So far I only ...
- 1,165
1
vote
1
answer
180
views
RDP to a Virtual Machine. Where should I apply the security measures? [closed]
I have a computer with Hyper-V installed and a virtual machine. I want to connect only and directly to the VM with Remote-Desktop from outside the network.
I have some good ideas to make the ...
31
votes
5
answers
10k
views
If my machine is infected and I run a Virtual Machine inside of it, will the VM also be compromised
I've been researching on virtual machine security and found a lot of articles detailing how an infected VM is isolated (or not) from the host machine.
But I couldn't find any answers to the opposite ...
- 421
1
vote
1
answer
213
views
What is the point of an OS (Win11) requiring a TPM (or vTPM) beyond a layer of DRM?
Windows 11 requiring a TPM of some sort seems more like a DRM preventing me from duplicating a W11 Virtual Machine on multiple systems and distributing it versus any tangible benefit to the end-user.
...
2
votes
2
answers
335
views
How to create a safe environment in Windows 10 for high-performance programs?
My friend handed me a .exe file of an old game we want to play together. My laptop has important files, so I do not want to install it immediately. I am still sceptical that he might not know it ...
- 21
0
votes
0
answers
223
views
How to isolate Windows10 Virtual machine from w10 host (virtualbox) for malware analysis [duplicate]
My goal is to find malware that performs network activities and captures the traffic with Wireshark. I have a Windows 10 laptop host machine and VirtualBox which has virtual Windows 10 machine.
I am ...
2
votes
1
answer
114
views
Why must a virtual image be secured
Virtual machines and their disk images are simply files residing somewhere. So I supposed this means that, for example, a stopped VM is potentially accessible on a file system. What could an attacker ...
- 47
1
vote
3
answers
168
views
security measures for proprietary code on a VPS
I've got several C++ and Python scripts containing proprietary algorithms, which are latency-sensitive and hence need to be on a system near the data center serving data to them. While a VPS is ...
- 21
0
votes
2
answers
489
views
What happens to apps, files, objects in a VM if it gets deleted
Usually, when a file is deleted on your computer, it is simply unlinked. The file data is still stored on your disk, there's just nothing pointing to that spot in the memory, and the OS interprets ...
- 101
2
votes
1
answer
204
views
How to make sure my laptop (Ubuntu 20.04) is secure with a Windows 7 VM?
I have an old laptop which is running Ubuntu 20.04 and I am planning to use a virtual machine of Windows 7 Pro (using VirtualBox maybe). As its an old laptop and not my primary source of using the ...
- 23
1
vote
1
answer
267
views
setting up a lab in virtualbox for different tasks: local net testing & vulnerable virtual network
I have seen several tutorials about setting up Virtualbox networks for Kali & vulnerable machines together using the option Internal network, but I have several questions regarding other ...
- 113
1
vote
1
answer
142
views
Are CPU side-channel attacks still a concern on VPSs
I've been looking into getting a VPS to run an OpenVPN server on and a few other things. I've been speaking to a hosting company and they have sent me this screenshot to show they are protected ...
- 109
0
votes
2
answers
407
views
Using Hydra not sending traffic to target VM
I have 3 VM's
1 with Ubuntu server version 20.04, apache2, php, mysql and DVWA. (10.0.2.4)
1 with Ubuntu client version 20.04 with hydra installed. (10.0.2.5)
1 with Kali 2021.3. (10.0.2.6)
All VM's ...
- 111
1
vote
1
answer
228
views
Is protecting against Meltdown and Spectre on virtual servers actually possible?
I've been reading into the Meltdown and Spectre bugs recently and the issues they cause for virtualised servers, as memory in one VM can potentially be accessed by another user in a separate VM with ...
- 109
0
votes
1
answer
138
views
Can you subvert a physical system at runtime?
In case of a virtual machine it is possible to break out of the VM and gain code execution on the host. In that way you could evade any detection mechanism for malware inside the VM and maybe even on ...
- 1
1
vote
2
answers
988
views
Browser fingerprint is unique while running a VM of a clean install of Windows 10
So I used Qemu on Ubuntu 20 to emulate a computer running windows 10. I kept all of Qemu default values. Then, while installing the Windows 10 iso, I kept all the default values once again. Finally, I ...
- 13
0
votes
1
answer
150
views
Can I detect malware that’s on my host OS if I’m using diagnostic tools in a VM?
If I have a VirtualBox VM running Kali Linux, can I use its diagnostic tools to search for malware on the host?
10
votes
2
answers
706
views
How effective is Windows KDP for exploit mitigation in practice?
Windows Kernel Data Protection is a kernel security feature which appears to use Extended Page Tables (EPT, a hardware virtualization feature) to enforce read-only pages. How effective is this at ...
- 66.3k
0
votes
2
answers
271
views
Can computers built in minecraft be used to hijack hosts?
As people build more powerful computers in minecraft which can then run programs, is there a way to use those computers to run programs that hijack the host in some way?
Possible contest example would ...
- 1
0
votes
3
answers
277
views
Can you make your host machine appear as a virtual machine?
I keep seeing how people are working to make virtual machines look more like real machines, but I have been wondering about the reverse. I have noticed a trend where viruses will automatically shut ...
- 1
0
votes
0
answers
32
views
secure deletion in virtual machines [duplicate]
when we securely delete a volume in a machine which is installed in a virtual machine or docker, for example by overwriting 7 times or more, we securely delete the data in virtual disk (in guest) and ...
- 1
1
vote
1
answer
103
views
Does running a virtual machine provide a small layer of protection against an infected host in practice
Obviously a host can modify a virtual machine in any way and has full control over it, but in practice perhaps most viruses wouldn't have the complexity to search for virtual machines and modify them. ...
- 143
55
votes
6
answers
20k
views
If malware does not run in a VM why not make everything a VM?
There is a lot of malware that can detect whether it is running inside a VM or sandboxed environment and if such environment is detected it can conceal it self and not execute. So why not make ...
- 1,165
15
votes
1
answer
6k
views
Norton detects intrusion attempt from virtual machine - how is this possible?
Sometimes I have to fix an infected WordPress website. I always check the infected website from a virtual machine (Oracle VM VirtualBox). I'm also running Norton 360 DeluXe on the host machine.
In the ...
- 153
0
votes
0
answers
154
views
How to Minimize Risk of Remote Access from Potential Job Scam?
Question resolved: no reason at this time to assume the remote access was with any malicious intent.
[skip this beginning if you want]
My partner was offered a job with a real estate listing company ...
1
vote
1
answer
267
views
Does streaming a game from a dedicated gaming VM still expose my PCs to significant privacy/security concerns from installed games?
So the plan is to make a Windows 10 guest, give it lots of vCPUs and memory, perform GPU passthrough to achieve maximal performance, and then load my games onto this guest. The aim of this would be to ...
- 340
2
votes
0
answers
213
views
Would it be more secure to have untrusted applications execute on a type 1 or a type 2 hypervisor?
My usual workflow is to run potentially malicious applications/websites (untrusted) inside of a virtualbox VM. Lately I have been playing with hyper-v. From what I gather, critical windows components ...
- 21
0
votes
1
answer
546
views
Is a VirtualBox guest isolated from the host?
I have a Linux machine running Kubuntu 20.10.
I have installed VirtualBox 6.1. I then created a virtual machine on which I have installed Windows 10.
Suppose an hacker enters in my Windows 10 guest.
...
- 517
6
votes
1
answer
972
views
Can Google access data in their Confidential Computing VMs?
A cloud operator such as Google can take a snapshot of a normal VM. This includes CPU state, RAM and disk. This can then be copied to another physical and resumed there. Or it can be analyzed off-line,...
- 322