Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [virtualization]

Virtualization is the creation of a virtual (rather than actual) version of something, such as an operating system, a server, a storage device or network resources.

6
votes
1answer
568 views

How hard is it to distinguish between remote access to a virtual machine vs a piece of hardware?

Let's say I have full access to a remote machine (specifically, root on a Linux). What is the best method to check whether this is a real piece of hardware or a virtual machine? Most of the methods ...
0
votes
1answer
42 views

SSH Timed out problem [on hold]

I can't connect to my kali linux ssh server running in Virtualbox through puTTY. I didn't make any changes to /etc/ssh/sshd_config file, besides Port and PermitRootLogin That's how i booted up my ssh ...
2
votes
0answers
31 views

VirtualBox & Spectre V4

I found the following ticket in the VirtualBox issue tracker: https://www.virtualbox.org/ticket/17987 The important (in the context of this question) part is that the guest OS (Debian) running in ...
1
vote
2answers
119 views

If I turn off Windows Defender Credential Manager off in Windows 10 so I can run a virtual machine in Virtual Box, is that a bad idea?

My processor is supposed to support virtualization: cpu.inf:5f63e534115a322c:IntelPPM_Inst.NT:10.0.17134.765:ACPI\GenuineIntel_-_Intel64 ACPI\GENUINEINTEL_-_INTEL64_FAMILY_6_MODEL_37_-_INTEL(R)_CORE(...
1
vote
0answers
32 views

Trusted Execution Environment Vs. Hypervisor or VMs: How are they related?

I am a newbie learning all about isolation and separation for securing applications and system software. In this regard, I was reading up on ARM TEE and how it is available on most Android phones to ...
0
votes
1answer
52 views

Key penetration from guest OS directly to hard drive

Most of the key protections are used to encrypt key to protect it from malware or other tenants. What if the hypervisor "steals" my key? If I am using a VM provided by a CSP, when I input a key to ...
-1
votes
1answer
60 views

How secure is virtualization against breaking out of the box [closed]

How secure are all currently used virtualization technologies (containers - BSD Jail, OpenVZ, Hypervisors - Hyper-V, KVM etc)? I heard about one vulnerability in VMware software, which lets you ...
0
votes
2answers
126 views

Security measures to take upon acquiring a new laptop?

I'm planning on buying a regular HP laptop. However, I'm still a novice when it comes to information security. I'm planning on using this laptop to SOLELY login to my bank accounts and NO OTHER ...
0
votes
1answer
140 views

Can I use a virtual machine to connect to a public WIFI to use Internet by totally isolating the host from it?

I want to use my laptop to connect to a public WiFi in a library but... I have strong security in my Windows host machine (comodo firewall using a public network settings and rules, protocols ...
0
votes
1answer
108 views

Is VM escape has the same severity as me getting in a car crash? [closed]

I'm exploring the threats for VDIs on VMware, based on the article it seems the risk for VM escape has low severity as described here:http://vmescape.com/index.html Did we forget the discussion of ...
0
votes
1answer
121 views

Is it safer to use Qubes with Whonix from Virtualbox than directly on the host computer?

I know it isn't advised to run Qubes-Whonix from Virtualbox due to performance issues, but other than that, is it safer? I.e. is it harder or easier to hack/infect Qubes-Whonix running from Virtualbox ...
2
votes
1answer
49 views

Verifying Host Sterility After Running Malware Tests on Virtual Machine

I know that "VM escape" is becoming a common issue now with malware testing. I'm just wondering if there's any way of verifying if the host system is clean from any infection after running a malware ...
0
votes
1answer
51 views

Virtualized or Container (Remote) Based Browser Isolation is more secure?

There obvious costs differences between them but I am not sure from a security perspective which of them considered to be more secure.
1
vote
4answers
102 views

The safest way to transfer files to an offline test environment

I'm wondering what the best tactic is to transfer dangerous files from an internet connected machine to an offline, separated from the web, virtual machine. Why should I do that? Because I want to ...
2
votes
0answers
90 views

What security isolation exists between VDI instance to VMware Horizon to ESX?

I read about malware that was able to escape the VM and get to the VMware Horizon host and then to hypervisor ESX, but I am not sure what security controls exist to prevent malware from jumping to ...
1
vote
0answers
61 views

How a browser isolation product is safer than our enterprise-hardened Chrome? [closed]

We have been offered a security product that provides browser isolation but I am not really sure what the benefits could be of such a solution in an enterprise.
0
votes
0answers
25 views

VirtualBox file sharing: is there a security difference between never having done it and having done it but now disabled it?

I'm thinking of getting started with VirtualBox but for security reasons I would like to keep file sharing off. However, there are certainly some files I'd like to transfer from host to guest. Would ...
0
votes
0answers
50 views

Secure way to sign virtualbox module for secure boot

I'm not sure if the Virtualbox version from the repository of my Linux distribution is already signed and works right away, but since it's not up-to-date I'm installing Virtualbox from the official ...
0
votes
0answers
23 views

Is VMWare workstation really safe? [duplicate]

I want to try to run some malwares in VMWare and I am a little bit afraid. Is it really safe? Is there any option that malware can get into my main PC?
2
votes
1answer
91 views

Isolate Virtual Machines on host-only adapter- Malware Analysis

I am performing malware analysis on virtual box. I want only the VMs to communicate to each other. Using host-only adapters, I have installed a Windows7 VM (192.168.56.101) with default gateway (192....
0
votes
0answers
28 views

How much VirtualBox device/ios emulator/blueStacks informatin can be logged/tracked by servers/ apps?

This question is intended to know if we can be tricked by Virtual devices emulators. How much logging information can servers/apps request to tell the difference? In the other word, Can we hide our ...
0
votes
2answers
115 views

Securely compile foreign code and run it on a server?

I would like to set up a server that can receive source code directly, compile/interpret it and execute it. The code could be C#, Java, C++, C, Javascript, PHP... There will obviously be security ...
0
votes
1answer
59 views

Virtual machines vs separate physical machines for testing potential malware

If you have to run potentially insecure executables, would using a separate laptop have any security benefit compared to a virtual machine, or would it be worse in the sense that the machine's ...
0
votes
1answer
304 views

Android x86 vs Android on Qemu ARM

Situation: Emulating Android devices for pen-testing Problem: Choosing between emulating Android x86 or emulating Android on Qemu runing on ARM Question: In terms of vulnerabilities/exploitability, ...
2
votes
3answers
238 views

Malware Analysis

What would be a good approach for testing malware or bad url's from things picked up from my SIEM to validate them? I was told to setup a VM for these tests but don't want it to hit the internal ...
1
vote
1answer
79 views

What are the security trade offs between the different methods for encrypting a guest VM image?

The scenario is a lightly secured home or work PC used primarily for low-sensitive operations. For more secure activities a pre-built and restrictive virtual machine will be used. I'm mostly ...
53
votes
2answers
8k views

If a container is compromised does that mean host also compromised?

Recently, I have heard of a new virtualization tech called containers. Suppose the container has been compromised, does this mean the host is also compromised (since the container is a process on a ...
2
votes
1answer
289 views

Is Meltdown/Spectre mitigation necessary in virtual machine as well as in hypervisor? [duplicate]

I am running virtual machines in kvm/qemu hypervisor. The hypervisor has Meltdown/Spectre mitigation enabled in kernel. Is it necessary that virtual machines have the Meltdown/Spectre mitigation ...
0
votes
1answer
95 views

Why it best to do security testing on a copy on a Virtual Machine rather than on than the live server? [closed]

Why is it better for a security tester to take a copy of a server e.g. eBay server and test it on a virtual machine rather than on than the real eBay server? E.g. doing security testing on the live ...
-4
votes
1answer
211 views

How does testing on a Virtual Machine prevent the security tester from breaching the misuse act? [closed]

Why is it better for a security tester to test a virtual copy of a server e.g. eBay server and test it on a virtual machine rather than on the real eBay server? E.g. Doing security on the real server ...
1
vote
1answer
49 views

Is it possible to detect if a trojan or program sends information by sniffing the network of a VM

Explaining better, I was consulting on how I can ensure that the programs of an operating system does not perform any suspicious activity with my information, and I have been told that electronic ...
1
vote
1answer
229 views

Mitigation of Spectre and Meltdown affecting host OS from guest OS (Virtualbox)

I don't know all the details of Spectre and Meltdown, but the way I understand it is that they allow reading from memory, not writing to it. Also, I read that at least Spectre can get out of the ...
2
votes
1answer
104 views

What are some attacks to consider in a cloud deployment? [duplicate]

I want to discuss the following scenario: I use a cloud provider like Amazon where every instance of the OS is a VM. The hypervisor launches the VMs as needed. So let's assume there are two VMs ...
2
votes
1answer
132 views

In-memory encrypted Linux/unix kernel

Is there a variant of Linux kernel for virtualization that runs in-memory in a state that can't be read by the host operating system?
0
votes
2answers
105 views

Risk of infecting the host OS if the guest OS is out of date [duplicate]

I'd like to know how much the risk changes if I don't update the software on the guest OS in a VM (applications and the guest operating system itself), compared to the risk in case it's all kept up-to-...
2
votes
1answer
93 views

Can government authorities retrieve data from LUKS volume when it's accessed while turned on? [duplicate]

I've heard that there are attacks that can get passwords out of RAM while turned on. If a server, CentOS 7.5 and LUKS enabled, it's tty1 locked, which is on a VMWare hypervisor that is locked with a ...
-1
votes
2answers
159 views

VPN Split Tunneling with VM safer?

I want to privately surf in a Virtual machine. I am questioning if it would be better/more private to use the Split Tunneling feature of my VPN Program (on the Host installed) and only allow my VM to ...
0
votes
0answers
19 views

Hyper-V keep enhanced session while blocking redirected drives

I'm creating a nested vm user desktop inside Windows 10 Enterprise. I'm using the hyper-v console, not mstsc.exe. The user desktop vm needs to use a headset and microphone which requires Enhanced ...
0
votes
0answers
303 views

Docker Isolation Vs VM Isolation [duplicate]

I was watching Learn Docker in 12 Minutes and at 1:40 he said the isolation of Docker is a compromise and that it's not as strong as VM's but he doesn't mention why. I wonder what could be the reason. ...
2
votes
2answers
163 views

Is it safe to run a potentially malicious ISO in a VM using VirtualBox? [duplicate]

I want to try out an OS called "Red Star OS". I want to make it a completely isolated VM, no network connectivity etc., just to explore and take a look at it. I found out where to get it from this ...
0
votes
2answers
110 views

Privacy of client's virtual machine in cloud computing

As we know clients can create and run their virtual machines (VM)in the cloud computing. My question is about the confidentiality of data stored in the client's VM. Question 1: Does data stored in a ...
6
votes
3answers
776 views

What kind of access on the guest is required to break out of a virtual machine?

Is it enough to exploit the vulnerability in a program? Is root or kernel access required? Are there maybe even possibilities to directly exploit the host without any vulnerabilities in the guest? To ...
-1
votes
1answer
775 views

Why should not run Metasploitable on bridge network?

I have read on somewhere that: "Do not run Metasploitable (an Intended Vulnerable Virtual Machine) in your Bridge Network." Why? Does it create a bridge to the attacker's system directly? If yes, ...
0
votes
1answer
370 views

Can Microsoft collect data from inside a virtual machine?

If I spin up an OS in a VM, can Microsoft still collect and track data from the guest OS? I'm just wondering if Windows 10 collects that much data or not. Just FYI: no, I'm not a nutter that's ...
1
vote
2answers
205 views

Should I wait until Spectre and Meltdown is fixed in hardware? [duplicate]

I have a Laptop that needs replacing due to age. I will be using this laptop for desktop use, including Office Apps, Development, Running VMs & Web Browsing. I will be using separation using ...
1
vote
0answers
130 views

VBoxClient error in BitDefender rescue CD [closed]

I'm afraid that I am targetted by hackers. To resolve this, I'm now trying the BitDefender rescue CD. When starting it, I get the following error notification: VBoxClient: VirtualBox kernel ...
0
votes
1answer
100 views

Is it safe to open “suspect” pdf files in virtual machine? [duplicate]

I became aware recently that Javascript scripts can be embedded in PDF files. Anyway, I have a pdf file which I suspect is not safe to open. I scanned it with VirusTotal and Kaspersky VirusDesk and ...
1
vote
1answer
365 views

Windows PFX certificate import: protect private key using virtualization-based security?

On Windows 10 v1803 (i.e. April 2018 update) when importing a PFX, an option like [ ] Protect private key using virtualization-based security (non-exportable) appears on the import wizard. What is ...
0
votes
0answers
38 views

How to manage several VPNs for customers?

This is, somehow, a theoretical question. I am working in a software-developer company. We have several customers. For each customer we have a Virtual Machine where we have a VPN to the customer ...
2
votes
0answers
89 views

Need Security advice on virtualization and windows security

I have a little doubt about the security of my virtual machine and Windows. Can anyone please point me in right direction? Below is my what, how and why I made my virtual machine. Let me tell you ...