Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [virtualization]

Virtualization is the creation of a virtual (rather than actual) version of something, such as an operating system, a server, a storage device or network resources.

1
vote
1answer
24 views

Verifying Host Sterility After Running Malware Tests on Virtual Machine

I know that "VM escape" is becoming a common issue now with malware testing. I'm just wondering if there's any way of verifying if the host system is clean from any infection after running a malware ...
0
votes
1answer
42 views

Virtualized or Container (Remote) Based Browser Isolation is more secure?

There obvious costs differences between them but I am not sure from a security perspective which of them considered to be more secure.
1
vote
4answers
94 views

The safest way to transfer files to an offline test environment

I'm wondering what the best tactic is to transfer dangerous files from an internet connected machine to an offline, separated from the web, virtual machine. Why should I do that? Because I want to ...
2
votes
0answers
74 views
+50

What security isolation exists between VDI instance to VMware Horizon to ESX?

I read about malware that was able to escape the VM and get to the VMware Horizon host and then to hypervisor ESX, but I am not sure what security controls exist to prevent malware from jumping to ...
1
vote
0answers
55 views

How a browser isolation product is safer than our enterprise-hardened Chrome? [closed]

We have been offered a security product that provides browser isolation but I am not really sure what the benefits could be of such a solution in an enterprise.
0
votes
0answers
7 views

kali can't connect to metasploitable [migrated]

I need your help guys. I have my kali virtual box image and its network is my created NAT network(NAT1) I have my metasmploitable image and its network is my same created NAT Network(NAT1) on ...
0
votes
0answers
21 views

VirtualBox file sharing: is there a security difference between never having done it and having done it but now disabled it?

I'm thinking of getting started with VirtualBox but for security reasons I would like to keep file sharing off. However, there are certainly some files I'd like to transfer from host to guest. Would ...
0
votes
0answers
24 views

Secure way to sign virtualbox module for secure boot

I'm not sure if the Virtualbox version from the repository of my Linux distribution is already signed and works right away, but since it's not up-to-date I'm installing Virtualbox from the official ...
0
votes
0answers
16 views

Is VMWare workstation really safe? [duplicate]

I want to try to run some malwares in VMWare and I am a little bit afraid. Is it really safe? Is there any option that malware can get into my main PC?
-1
votes
0answers
34 views

Why don't cloud providers use containers directly? [duplicate]

Containers have a lower overhead than VMs. However, Google Cloud uses a KVM hypervisor to launch users' cloud instances as VMs. AWS uses the Xen hypervisor. Presumably this is because VMs offer ...
2
votes
0answers
30 views

Isolate Virtual Machines on host-only adapter- Malware Analysis

I am performing malware analysis on virtual box. I want only the VMs to communicate to each other. Using host-only adapters, I have installed a Windows7 VM (192.168.56.101) with default gateway (192....
0
votes
0answers
28 views

How much VirtualBox device/ios emulator/blueStacks informatin can be logged/tracked by servers/ apps?

This question is intended to know if we can be tricked by Virtual devices emulators. How much logging information can servers/apps request to tell the difference? In the other word, Can we hide our ...
0
votes
2answers
110 views

Securely compile foreign code and run it on a server?

I would like to set up a server that can receive source code directly, compile/interpret it and execute it. The code could be C#, Java, C++, C, Javascript, PHP... There will obviously be security ...
0
votes
1answer
43 views

Virtual machines vs separate physical machines for testing potential malware

If you have to run potentially insecure executables, would using a separate laptop have any security benefit compared to a virtual machine, or would it be worse in the sense that the machine's ...
0
votes
1answer
68 views

Android x86 vs Android on Qemu ARM

Situation: Emulating Android devices for pen-testing Problem: Choosing between emulating Android x86 or emulating Android on Qemu runing on ARM Question: In terms of vulnerabilities/exploitability, ...
2
votes
3answers
181 views

Malware Analysis

What would be a good approach for testing malware or bad url's from things picked up from my SIEM to validate them? I was told to setup a VM for these tests but don't want it to hit the internal ...
0
votes
1answer
39 views

What are the security trade offs between the different methods for encrypting a guest VM image?

The scenario is a lightly secured home or work PC used primarily for low-sensitive operations. For more secure activities a pre-built and restrictive virtual machine will be used. I'm mostly ...
52
votes
2answers
8k views

If a container is compromised does that mean host also compromised?

Recently, I have heard of a new virtualization tech called containers. Suppose the container has been compromised, does this mean the host is also compromised (since the container is a process on a ...
2
votes
1answer
155 views

Is Meltdown/Spectre mitigation necessary in virtual machine as well as in hypervisor? [duplicate]

I am running virtual machines in kvm/qemu hypervisor. The hypervisor has Meltdown/Spectre mitigation enabled in kernel. Is it necessary that virtual machines have the Meltdown/Spectre mitigation ...
0
votes
1answer
92 views

Why it best to do security testing on a copy on a Virtual Machine rather than on than the live server? [closed]

Why is it better for a security tester to take a copy of a server e.g. eBay server and test it on a virtual machine rather than on than the real eBay server? E.g. doing security testing on the live ...
-4
votes
1answer
197 views

How does testing on a Virtual Machine prevent the security tester from breaching the misuse act? [closed]

Why is it better for a security tester to test a virtual copy of a server e.g. eBay server and test it on a virtual machine rather than on the real eBay server? E.g. Doing security on the real server ...
1
vote
1answer
47 views

Is it possible to detect if a trojan or program sends information by sniffing the network of a VM

Explaining better, I was consulting on how I can ensure that the programs of an operating system does not perform any suspicious activity with my information, and I have been told that electronic ...
1
vote
1answer
134 views

Mitigation of Spectre and Meltdown affecting host OS from guest OS (Virtualbox)

I don't know all the details of Spectre and Meltdown, but the way I understand it is that they allow reading from memory, not writing to it. Also, I read that at least Spectre can get out of the ...
1
vote
1answer
88 views

What are some attacks to consider in a cloud deployment? [duplicate]

I want to discuss the following scenario: I use a cloud provider like Amazon where every instance of the OS is a VM. The hypervisor launches the VMs as needed. So let's assume there are two VMs ...
2
votes
1answer
84 views

In-memory encrypted Linux/unix kernel

Is there a variant of Linux kernel for virtualization that runs in-memory in a state that can't be read by the host operating system?
0
votes
2answers
89 views

Risk of infecting the host OS if the guest OS is out of date [duplicate]

I'd like to know how much the risk changes if I don't update the software on the guest OS in a VM (applications and the guest operating system itself), compared to the risk in case it's all kept up-to-...
2
votes
1answer
73 views

Can government authorities retrieve data from LUKS volume when it's accessed while turned on? [duplicate]

I've heard that there are attacks that can get passwords out of RAM while turned on. If a server, CentOS 7.5 and LUKS enabled, it's tty1 locked, which is on a VMWare hypervisor that is locked with a ...
-1
votes
2answers
106 views

VPN Split Tunneling with VM safer?

I want to privately surf in a Virtual machine. I am questioning if it would be better/more private to use the Split Tunneling feature of my VPN Program (on the Host installed) and only allow my VM to ...
0
votes
0answers
17 views

Hyper-V keep enhanced session while blocking redirected drives

I'm creating a nested vm user desktop inside Windows 10 Enterprise. I'm using the hyper-v console, not mstsc.exe. The user desktop vm needs to use a headset and microphone which requires Enhanced ...
0
votes
0answers
148 views

Docker Isolation Vs VM Isolation [duplicate]

I was watching Learn Docker in 12 Minutes and at 1:40 he said the isolation of Docker is a compromise and that it's not as strong as VM's but he doesn't mention why. I wonder what could be the reason. ...
2
votes
2answers
146 views

Is it safe to run a potentially malicious ISO in a VM using VirtualBox? [duplicate]

I want to try out an OS called "Red Star OS". I want to make it a completely isolated VM, no network connectivity etc., just to explore and take a look at it. I found out where to get it from this ...
0
votes
2answers
98 views

Privacy of client's virtual machine in cloud computing

As we know clients can create and run their virtual machines (VM)in the cloud computing. My question is about the confidentiality of data stored in the client's VM. Question 1: Does data stored in a ...
0
votes
0answers
79 views

What are data exfiltration channels after a successful VM break out?

Suppose someone managed to break out of a VM and gained access on the host. If there is networking on the host this could be leveraged to exfiltrate data. What could done to prevent this? Depending on ...
6
votes
2answers
698 views

What kind of access on the guest is required to break out of a virtual machine?

Is it enough to exploit the vulnerability in a program? Is root or kernel access required? Are there maybe even possibilities to directly exploit the host without any vulnerabilities in the guest? To ...
0
votes
0answers
141 views

Can WannaCry infect my local network and its devices?

So long story short I wanted to test out WannaCry on my Windows 7 guest machine, thing is I forgot to disable the network connection / interface in virtualbox and ran it. Only seconds later I realized ...
-1
votes
1answer
505 views

Why should not run Metasploitable on bridge network?

I have read on somewhere that: "Do not run Metasploitable (an Intended Vulnerable Virtual Machine) in your Bridge Network." Why? Does it create a bridge to the attacker's system directly? If yes, ...
0
votes
1answer
320 views

Can Microsoft collect data from inside a virtual machine?

If I spin up an OS in a VM, can Microsoft still collect and track data from the guest OS? I'm just wondering if Windows 10 collects that much data or not. Just FYI: no, I'm not a nutter that's ...
1
vote
2answers
191 views

Should I wait until Spectre and Meltdown is fixed in hardware? [duplicate]

I have a Laptop that needs replacing due to age. I will be using this laptop for desktop use, including Office Apps, Development, Running VMs & Web Browsing. I will be using separation using ...
1
vote
0answers
107 views

VBoxClient error in BitDefender rescue CD [closed]

I'm afraid that I am targetted by hackers. To resolve this, I'm now trying the BitDefender rescue CD. When starting it, I get the following error notification: VBoxClient: VirtualBox kernel ...
0
votes
1answer
96 views

Is it safe to open “suspect” pdf files in virtual machine? [duplicate]

I became aware recently that Javascript scripts can be embedded in PDF files. Anyway, I have a pdf file which I suspect is not safe to open. I scanned it with VirusTotal and Kaspersky VirusDesk and ...
1
vote
1answer
257 views

Windows PFX certificate import: protect private key using virtualization-based security?

On Windows 10 v1803 (i.e. April 2018 update) when importing a PFX, an option like [ ] Protect private key using virtualization-based security (non-exportable) appears on the import wizard. What is ...
0
votes
0answers
37 views

How to manage several VPNs for customers?

This is, somehow, a theoretical question. I am working in a software-developer company. We have several customers. For each customer we have a Virtual Machine where we have a VPN to the customer ...
2
votes
0answers
82 views

Need Security advice on virtualization and windows security

I have a little doubt about the security of my virtual machine and Windows. Can anyone please point me in right direction? Below is my what, how and why I made my virtual machine. Let me tell you ...
-1
votes
2answers
83 views

Secure access to an aplication from internet [closed]

I have an application wich needs to connect to the main database. I want this application to be accessible from outside the enterprise network. I think that the best way is to install the app in a SQL ...
1
vote
1answer
85 views

Is it secure to keep malware in filesystem of VMs?

We are going to install a sandbox solution that requires Ubuntu Server as the underlying OS (the product is not shipped as a ready to install appliance). For performance reasons the malware samples ...
3
votes
2answers
57 views

Testing an untrusted browser extension securely on macOS

I have received a .zip file containg a browser extension for Google Chrome. How can I test this safely? Current options I consider: 1) Using a VM. Installing VirtualBox on my macos, and then running ...
0
votes
1answer
151 views

Is the security of a VPN client on a Virtual Machine decreased?

It's well known that VPN clients might leak their true IP, due to applications like Skype or WebRTC clients or who knows. Moreover, services like Google keep complaining that I connected from an "...
4
votes
2answers
318 views

Is it secure to wipe a file in a Virtualbox disk if the vbox disk file is on an ssd?

Preface I searched for an answer to my question and found related questions which do not cover my question completely. Like: On SSD deleting: Can Widped SSD Data be recovered How to securely delete ...
3
votes
2answers
160 views

Why cant i run malware in my Virtual Environment

Im trying to run some malware samples in my Virtual lab to capture their IOC's. Im doing this for my Masters Thesis but i can not seem to get the malware to run. I have downloaded samples from hybrid ...
12
votes
3answers
5k views

Should Virtual Machines be patched for Meltdown and Spectre?

In Meltdown and Virtual Machines it was clarified that at least Spectre works crossing VMs. This of course means that the Hypervisor must be patched, but Should the VM OS be patched as well? Not ...