Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [virtualization]

Virtualization is the creation of a virtual (rather than actual) version of something, such as an operating system, a server, a storage device or network resources.

0
votes
1answer
31 views

What are the security trade offs between the different methods for encrypting a guest VM image?

The scenario is a lightly secured home or work PC used primarily for low-sensitive operations. For more secure activities a pre-built and restrictive virtual machine will be used. I'm mostly ...
52
votes
2answers
8k views

If a container is compromised does that mean host also compromised?

Recently, I have heard of a new virtualization tech called containers. Suppose the container has been compromised, does this mean the host is also compromised (since the container is a process on a ...
2
votes
1answer
76 views

Is Meltdown/Spectre mitigation necessary in virtual machine as well as in hypervisor? [duplicate]

I am running virtual machines in kvm/qemu hypervisor. The hypervisor has Meltdown/Spectre mitigation enabled in kernel. Is it necessary that virtual machines have the Meltdown/Spectre mitigation ...
0
votes
1answer
90 views

Why it best to do security testing on a copy on a Virtual Machine rather than on than the live server? [closed]

Why is it better for a security tester to take a copy of a server e.g. eBay server and test it on a virtual machine rather than on than the real eBay server? E.g. doing security testing on the live ...
-4
votes
1answer
177 views

How does testing on a Virtual Machine prevent the security tester from breaching the misuse act? [closed]

Why is it better for a security tester to test a virtual copy of a server e.g. eBay server and test it on a virtual machine rather than on the real eBay server? E.g. Doing security on the real server ...
1
vote
1answer
45 views

Is it possible to detect if a trojan or program sends information by sniffing the network of a VM

Explaining better, I was consulting on how I can ensure that the programs of an operating system does not perform any suspicious activity with my information, and I have been told that electronic ...
1
vote
1answer
80 views

Mitigation of Spectre and Meltdown affecting host OS from guest OS (Virtualbox)

I don't know all the details of Spectre and Meltdown, but the way I understand it is that they allow reading from memory, not writing to it. Also, I read that at least Spectre can get out of the ...
1
vote
1answer
76 views

What are some attacks to consider in a cloud deployment? [duplicate]

I want to discuss the following scenario: I use a cloud provider like Amazon where every instance of the OS is a VM. The hypervisor launches the VMs as needed. So let's assume there are two VMs ...
2
votes
1answer
71 views

In-memory encrypted Linux/unix kernel

Is there a variant of Linux kernel for virtualization that runs in-memory in a state that can't be read by the host operating system?
0
votes
2answers
89 views

Risk of infecting the host OS if the guest OS is out of date [duplicate]

I'd like to know how much the risk changes if I don't update the software on the guest OS in a VM (applications and the guest operating system itself), compared to the risk in case it's all kept up-to-...
2
votes
1answer
62 views

Can government authorities retrieve data from LUKS volume when it's accessed while turned on? [duplicate]

I've heard that there are attacks that can get passwords out of RAM while turned on. If a server, CentOS 7.5 and LUKS enabled, it's tty1 locked, which is on a VMWare hypervisor that is locked with a ...
-1
votes
2answers
86 views

VPN Split Tunneling with VM safer?

I want to privately surf in a Virtual machine. I am questioning if it would be better/more private to use the Split Tunneling feature of my VPN Program (on the Host installed) and only allow my VM to ...
0
votes
0answers
21 views

Microsoft EMET : does it work if used in a virtual machine?

As the title says, are the mitigations provided by EMET as effective when running in a virtual machine as they are when it's running on a real PC ? If not, why ? [ I am actually running a Windows ...
0
votes
0answers
15 views

Hyper-V keep enhanced session while blocking redirected drives

I'm creating a nested vm user desktop inside Windows 10 Enterprise. I'm using the hyper-v console, not mstsc.exe. The user desktop vm needs to use a headset and microphone which requires Enhanced ...
0
votes
0answers
98 views

Docker Isolation Vs VM Isolation [duplicate]

I was watching Learn Docker in 12 Minutes and at 1:40 he said the isolation of Docker is a compromise and that it's not as strong as VM's but he doesn't mention why. I wonder what could be the reason. ...
2
votes
2answers
129 views

Is it safe to run a potentially malicious ISO in a VM using VirtualBox? [duplicate]

I want to try out an OS called "Red Star OS". I want to make it a completely isolated VM, no network connectivity etc., just to explore and take a look at it. I found out where to get it from this ...
0
votes
2answers
86 views

Privacy of client's virtual machine in cloud computing

As we know clients can create and run their virtual machines (VM)in the cloud computing. My question is about the confidentiality of data stored in the client's VM. Question 1: Does data stored in a ...
0
votes
0answers
74 views

What are data exfiltration channels after a successful VM break out?

Suppose someone managed to break out of a VM and gained access on the host. If there is networking on the host this could be leveraged to exfiltrate data. What could done to prevent this? Depending on ...
6
votes
2answers
691 views

What kind of access on the guest is required to break out of a virtual machine?

Is it enough to exploit the vulnerability in a program? Is root or kernel access required? Are there maybe even possibilities to directly exploit the host without any vulnerabilities in the guest? To ...
0
votes
0answers
111 views

Can WannaCry infect my local network and its devices?

So long story short I wanted to test out WannaCry on my Windows 7 guest machine, thing is I forgot to disable the network connection / interface in virtualbox and ran it. Only seconds later I realized ...
-1
votes
1answer
346 views

Why should not run Metasploitable on bridge network?

I have read on somewhere that: "Do not run Metasploitable (an Intended Vulnerable Virtual Machine) in your Bridge Network." Why? Does it create a bridge to the attacker's system directly? If yes, ...
0
votes
1answer
264 views

Can Microsoft collect data from inside a virtual machine?

If I spin up an OS in a VM, can Microsoft still collect and track data from the guest OS? I'm just wondering if Windows 10 collects that much data or not. Just FYI: no, I'm not a nutter that's ...
1
vote
2answers
175 views

Should I wait until Spectre and Meltdown is fixed in hardware? [duplicate]

I have a Laptop that needs replacing due to age. I will be using this laptop for desktop use, including Office Apps, Development, Running VMs & Web Browsing. I will be using separation using ...
1
vote
0answers
86 views

VBoxClient error in BitDefender rescue CD [closed]

I'm afraid that I am targetted by hackers. To resolve this, I'm now trying the BitDefender rescue CD. When starting it, I get the following error notification: VBoxClient: VirtualBox kernel ...
0
votes
1answer
92 views

Is it safe to open “suspect” pdf files in virtual machine? [duplicate]

I became aware recently that Javascript scripts can be embedded in PDF files. Anyway, I have a pdf file which I suspect is not safe to open. I scanned it with VirusTotal and Kaspersky VirusDesk and ...
1
vote
1answer
199 views

Windows PFX certificate import: protect private key using virtualization-based security?

On Windows 10 v1803 (i.e. April 2018 update) when importing a PFX, an option like [ ] Protect private key using virtualization-based security (non-exportable) appears on the import wizard. What is ...
0
votes
0answers
36 views

How to manage several VPNs for customers?

This is, somehow, a theoretical question. I am working in a software-developer company. We have several customers. For each customer we have a Virtual Machine where we have a VPN to the customer ...
2
votes
0answers
73 views

Need Security advice on virtualization and windows security

I have a little doubt about the security of my virtual machine and Windows. Can anyone please point me in right direction? Below is my what, how and why I made my virtual machine. Let me tell you ...
-1
votes
2answers
82 views

Secure access to an aplication from internet [closed]

I have an application wich needs to connect to the main database. I want this application to be accessible from outside the enterprise network. I think that the best way is to install the app in a SQL ...
1
vote
1answer
85 views

Is it secure to keep malware in filesystem of VMs?

We are going to install a sandbox solution that requires Ubuntu Server as the underlying OS (the product is not shipped as a ready to install appliance). For performance reasons the malware samples ...
3
votes
2answers
57 views

Testing an untrusted browser extension securely on macOS

I have received a .zip file containg a browser extension for Google Chrome. How can I test this safely? Current options I consider: 1) Using a VM. Installing VirtualBox on my macos, and then running ...
0
votes
1answer
135 views

Is the security of a VPN client on a Virtual Machine decreased?

It's well known that VPN clients might leak their true IP, due to applications like Skype or WebRTC clients or who knows. Moreover, services like Google keep complaining that I connected from an "...
4
votes
2answers
276 views

Is it secure to wipe a file in a Virtualbox disk if the vbox disk file is on an ssd?

Preface I searched for an answer to my question and found related questions which do not cover my question completely. Like: On SSD deleting: Can Widped SSD Data be recovered How to securely delete ...
3
votes
2answers
151 views

Why cant i run malware in my Virtual Environment

Im trying to run some malware samples in my Virtual lab to capture their IOC's. Im doing this for my Masters Thesis but i can not seem to get the malware to run. I have downloaded samples from hybrid ...
11
votes
3answers
5k views

Should Virtual Machines be patched for Meltdown and Spectre?

In Meltdown and Virtual Machines it was clarified that at least Spectre works crossing VMs. This of course means that the Hypervisor must be patched, but Should the VM OS be patched as well? Not ...
23
votes
1answer
7k views

Meltdown and Virtual Machines

This question originated from a discussion about VMs not being vulnerable to Meltdown. Can Meltdown "break out" of a virtual machine, so to speak? What is meant by this is: Can a program (with any ...
5
votes
1answer
2k views

Do I need to patch Linux for Meltdown/Spectre if the hypervisor has been patched, and I trust the guest?

If I'm running a VM on Amazon EC2 or Microsoft Azure, and they've patched the underlying hypervisor, do I need to upgrade my Linux kernel to protect against Meltdown or Spectre? Assume that I'm not ...
1
vote
0answers
35 views

Is using AWS and administered VMs a reasonable and feasible secure environment?

I'm currently tasked with exploring options for hosting secure data for our company that don't require setting up any in-house infrastructure as we don't currently have any. Everyone is a developer ...
0
votes
1answer
506 views

Can hackers compromise a VM to the point that they compromise your host OS? [duplicate]

Recently I was reading up on various security strategies and one that has been around for a while but is starting to gain traction now is working within a VM on your desired OS. If that VM ever gets ...
4
votes
1answer
411 views

Does the main OS run “virtualised” under the ring -1 hypervisor?

After reading this answer which explains that modern CPUs have a ring -1 that is running a hypervisor on the CPU and handles vmenter & stuff, I am wondering: The main operating system, like the ...
8
votes
3answers
3k views

Can .ova file contain an exploit?

Is it possible to prepare an .ova file for Oracle Virtualbox that will access NAT network when is set to use Whonix? There are preconfigured virtual machines like Windows to use in Whonix, but are ...
2
votes
1answer
154 views

Is it possible to make my host completely safe from the virtual machine (where I will do malware analysis)?

I am using Windows 10 Home edition (Fall creators update), 750 GB HDD. I use Oracle VirtualBox, and I have two virtual machines there: Windows 7 (32 bit) and Ubuntu 14.04.5. I will do malware-analysis ...
2
votes
1answer
111 views

What happens to a VM when you delete it? [closed]

I was curious what happens when you select "delete all files" option in Virtualbox? Are files saved on the installed OS in Virtualbox recoverable on your hard drive? Is there a secure way I can delete ...
1
vote
1answer
1k views

Honeypot in a VM on home network

Is it safe to run a honeypot on a virtual machine on my personal computer and home network? I was thinking of setting up a dmz on my home network to ensure my personal devices remain safe but was told ...
2
votes
3answers
8k views

Is a VM safe to run a simple virus on? [duplicate]

I just made a very simple batch virus that runs itself and runs on startup. I want to test it because I want to send it to a YouTuber who films himself running these viruses on a Virtual Machine. The ...
3
votes
1answer
245 views

Help choosing the right virtualization for a CTF [closed]

I am a High School cyber computer science teacher who also teaches courses on cyber security. I have been looking around for some good 'beginner' CTFs that I could organize for my students, but ...
264
votes
9answers
37k views

What makes Docker more secure than VMs or bare metal?

I recently had a discussion with a Docker expert about the security of Docker vs. virtual machines. When I told that I've read from different sources that it's easier for code running within a Docker ...
4
votes
1answer
227 views

What are escalation pathways from a VM to its host?

If I want to check out a dodgy link from a friend, I've started opening these in a virtual machine. I'm assuming that if the VM gets hacked, the host where I do internet banking etc will still be fine....
1
vote
2answers
264 views

Reverse sandbox

As I understand it, a sandbox is an isolated environment on a machine, used to gather informations on a threat, or test it directly. That's made so that the threat can't harm anything, once you're ...
-1
votes
1answer
85 views

Does working inside a VM that has a encrypted drive protect the files in the VM?

I want to work on a project that has some sensitive data. My plan was the following: Make a virtual Linux machine Use disk encryption on this machine Work on this machine without the internet ...