Virtualization is the creation of a virtual (rather than actual) version of something, such as an operating system, a server, a storage device or network resources.

learn more… | top users | synonyms

0
votes
0answers
10 views

VM Introspection on Public IaaS clouds

I came across this Security SE post and a few papers on VM Introspection [1] [2] [3] What prevents cloud providers like AWS from using techniques like these to observe EC2 instance activity? If they ...
7
votes
1answer
48 views

Are virtualized environments vulnerable to the Row Hammer attack?

Row Hammer is an exploit which relies on RAM defects to get unrestricted access to the RAM content, allowing to read/write otherwise protected memory and to get higher privileges on the system. To ...
5
votes
3answers
54 views

When testing out security vulnerabilities on sites such as OWASP Projects, should we be in a secured/protected environment?

I was curious if there is any need to secure/protect ourselves when doing projects on sites like OWASP to learn about vulnerabilities or "Wargames/Challenges" such as what's posted in these links How ...
0
votes
0answers
17 views

Virtualbox wipe drive on exit [migrated]

In Virtualbox, is there a way to wipe the virtual drive of a Guest OS upon exiting/shutting down that OS? If not, is there any other way to reaching that goal without doing it manually?
5
votes
4answers
288 views

How can I safely test malware in a VM? [duplicate]

This question has probably been asked several times here, but I'll ask it a bit differently. I am trying to learn about malware and how it infects computers and how to disinfect a computer if one ...
1
vote
1answer
36 views

Are any container solutions secure enough to run fully un-trusted code, particularly as a VPS service?

A number of answers here on this Stack Exchange argue that containers are inherently insecure and one should never run untrusted code in a container, let alone run a container built entirely by ...
1
vote
0answers
28 views

Can linux cgroups and namespaces assist hiding malware?

Reading about sandboxing/security possibilities I was looking a bit into cgroups and namespaces and asked myself: How do I know that my linux root account is indeed the real root account and not ...
1
vote
1answer
103 views

How to handle password storage for my project?

We have NFC cards to keep track of presence, students scan their card to a terminal at the beginning of every lesson, we want to extend the cards usage to filter out who can access the Raspberry Pi's ...
3
votes
2answers
100 views

Cybersecurity Server Stack references

I hear a lot of best practices saying that you should have 2 vSphere server stacks: One for Production One for Cybersecurity For example, your enterprise might have a vSphere environment stack that ...
1
vote
1answer
26 views

Virtulization in cloud and security

From a security perspective, which type of hyper-visor cloud is more secure - one that runs on bare-metal (using minimal boot strap build into hyper-visor) or one which is loaded as a part of the OS ...
1
vote
0answers
48 views

Are OpenStack SSH keys secure? [closed]

I found two places that describe OpenStack SSH keys, but nothing seems to say whether or not they're generated on VMs. Is this configurable? I have read and heard here (How can you securely ...
11
votes
1answer
203 views

How long to re-seed /dev/urandom in a virtual machine?

I have read plenty about the distinction between /dev/random and /dev/urandom. I understand that the prevailing advice is to use /dev/urandom. The explanation - that 256 bits of 'proper' randomness ...
3
votes
2answers
61 views

Is VeraCrypt encryption of VHDX correct?

I have created a dynamically expanding vhdx of 500GB to store my backups to - I have decided not to create a 500GB container due to time it would take to create one. I have encrypted the drive ...
4
votes
2answers
212 views

What information could be identified about a Virtual Machine which routed traffic via a VPN?

Background: I have a Virtual Machine which is running all it's traffic through a VPN (from within the Virtual Machine) so to obfuscate all web traffic. This Virtual Machine is running from within an ...
0
votes
1answer
58 views

Security implications of “local admin on host OS” vs “local admin on virtual guest OS”

At work we have a discussion on computer security. The scenario: Our work PCs are Windows desktops that are part of a windows domain Users have domain accounts they use to log in to windows The ...
6
votes
2answers
1k views

Apple vs DOJ - how strong is the 10-try wipe brute force barrier?

Out of curiosity and with the hope of helping other beginners and journalists. The current Apple vs DOJ standoff in a nutshell - Apple is resisting DOJ with statements like what they're asking is "...
0
votes
1answer
106 views

safe money transfer on open wifi VS vpn not allowed

sometimes I need to do money transfer on my windows tablet when I'm connected to an open wifi, but I noticed that some of them don't allow VPN services. This scares me, since I'm worried about ...
0
votes
1answer
59 views

Is it safe to host passwordless web applications/software with web GUI in Virtual Machines

I have a Linux Mint Virtual Machine which I use quite a lot with my Windows host. I have lots of Software installed there (mostly with web GUI so I can access them from host easily). So I am ...
3
votes
1answer
64 views

Detect a Virtual Machine on my Wifi?

Is there a way to detect whether a machine connected to my wifi is a physical machine or a virtual machine?
0
votes
1answer
57 views

Do I need to change my host OS to something like Tails if I already have Tails running in a VM if I want to be protected on the interenet?

First let me say sorry if I sound like a script kitty, because I am. Now on to my question. So I want to be protected on the internet when I go on the deep web, do banking etc. I use Tails to protect ...
4
votes
1answer
70 views

Does Docker provide the same security as a vm

Does Docker provide the same level of security/isolation as a virtual machine running over a hypervisor? If not, how can that be achieved?
0
votes
0answers
14 views

Sandboxing IE on metro interface

I hold a tablet with Windows 8.1. When I'm on the desktop interface I do use Sandboxie for normal internet usage to prevent having Windows infected. I wonder if there is a way to do the same with the ...
3
votes
5answers
667 views

Home Banking, antivirus safe environments OR Linux on virtual machines?

Which is the safest way to do home banking, given that I do use Windows on a tablet, I do connect to both private and public networks and I cannot use a Linux live distro right now? I've been ...
5
votes
2answers
113 views

Daily Virtual Machines workflow: Use for sensitive activities?

Daily Virtual Machines workflow: Use for sensitive activities? Every day I'm playing with fire regarding my computer security, in one chrome profile I have my business side, logged into social media ...
4
votes
1answer
240 views

Is this VM-sandbox idea a good idea for testing viruses? [duplicate]

You want to look at some viruses, so you use something like VirtualBox to create a sandbox environment. But what if we change that environment a lot? What if we do: STEP ONE: Create a bootable flash ...
3
votes
1answer
76 views

Operating system encryption of a Virtual Machine

I am a MacBook Pro user but sometimes I need to manage very sensitive data on Windows Seven. I am running Windows Seven on a virtual machine using Parallels Desktop v10.2.1. This software already has (...
2
votes
1answer
61 views

How secure is shared folder feature of virtualbox

If we have a folder shared between the host and guest OS in virtual box so that the guest can write in this folder, then it can drop any file (including malware) into such folder. But is there a way ...
3
votes
4answers
260 views

How Likely Is It For A Virus To Spread From A Linux VM To The Windows Host

I'm currently running Windows 10, and I plan to use a Linux distro to run in a VM (Virtual Box). I know Linux is one of the most secure operating systems there is and I'm curious as to how likely it ...
0
votes
0answers
40 views

How to get a completely isolated virtual time using Xen?

Referring to the following quote https://www.kernel.org/doc/Documentation/virtual/kvm/timekeeping.txt 4.8) Covert channels and leaks In addition to the above problems, time information will ...
5
votes
1answer
116 views

Resetting the Windows RNG

According to this research, Windows seems to produce the same sequence of random numbers indefinitely when a process is kicked off before a VM snapshot is taken. This is a huge issue obviously when ...
5
votes
3answers
378 views

How do professional hackers to test their own malwares/viruses without harming their own computer?

Yesterday I started some hacking tutorials on http://xeushack.com/tutorials/ by curiosity. I used the Android app to read the different articles about different ways of "hacking". The author clearly ...
0
votes
1answer
92 views

OpenVPN and running other services on same server

What security implications should I know about/look for when running OpenVPN on the same server as my network cloud controller and apt-cache-ng? I plan on using the same server to run apt-cacher-ng ...
0
votes
3answers
265 views

Most secure way to isolate computer on network

I handle personal client information. Stuff that shouldn't get lost. Because of this, I have had to be careful not to download or install anything that is in any way uncertain. One data stealing virus ...
3
votes
2answers
184 views

Most secure way to deliver web app for offline access [closed]

Having built a web app based on a PHP stack which is deployed on a server, I would like to have a way to provide access to it offline. There's a database of patients and appointments that needs to be ...
0
votes
0answers
66 views

Virtual Machine Introspection for VirtualBox

Is possible use Virtual Machine Introspection (VMI) for monitoring system calls and internal system operations in Oracle VirtualBox machine (if I use Linux as quest system) in this time? I have read ...
4
votes
2answers
380 views

Docker X11 Forwarding Security

I am currently running a Docker container with a program with a GUI forwarded over SSH (using X forwarding over OpenSSH). The virtualized server has X11Forwarding enabled and I can connect to it from ...
1
vote
1answer
49 views

What is the risk of data being recovered from SAN storage after logical deletion?

The specific scenario involves Linux servers on VMware hosts with SAN storage. If files containing sensitive data are deleted by Linux, can they be recovered by a low level tool similar to what might ...
7
votes
3answers
948 views

How do virtual machines help security?

Can using a VM help to protect my passwords or other data? I'm asking this because I'm using a PC that others have access to, so there is possibly of some malware. I don't want to login to my web ...
0
votes
0answers
68 views

VPN Server Inside VPN client on Router

This is a different context of an already asked question: In a few words: Sub-VPN or VPN SubNetwork... VPNsception? So I am using DD-WRT flashed router which connects as a client to VPN server "...
2
votes
1answer
102 views

Would placing a hardened virtual machine in a VPS provide more security?

I have been working with DigitalOcean for a while now and while I do like that they make it easy to start up with a fully functioning virtual machine ready to go. It makes me cringe a little though ...
9
votes
1answer
124 views

In VMs, do shared folders reduce security effectiveness?

VirtualBox offers the option of using shared folders, others probably offer the same thing. I am not sure whether the host is directly accessing the memory of the guest, or if there some process which ...
-4
votes
1answer
107 views

Will Kaspersky or BitDefender work on Hyper-V? [closed]

In case if I decide to test them or just don't want install them on a physical machine. I mean usual versions of antiviruses, not specially designed for virtual machines. Also interesting if I can ...
0
votes
1answer
152 views

Sandbox for GNU/Linux secure enough to run malware in it without harm [closed]

I am seemkng for a sandbox for Linux secure enough to run malware in it securely. It should allow create different sandboxes run different programs in them, including the ones requiring admin ...
5
votes
3answers
383 views

Can I make my online server more secure using Docker?

I had my online web server ransacked, they got in through my hosted WordPress site and privilege escalated from there. I am wondering, if I put the WordPress in a Docker, would that go a decent way ...
1
vote
1answer
137 views

Preventing outgoing Portscan/SYN/UDP Floods in the datacenter

We are a VPS hosting company that have servers housed in a datacenter in Germany. Currently we are receiving multiple take-down requests because customers are ports scanning or attacking servers ...
6
votes
4answers
578 views

Is this powershell script an infection?

While I was sitting in front of the computer not using it,my Windows 10 machine quickly flashed a few terminal windows, and then gave me a Windows Security popup, asking for my password. I have no ...
5
votes
2answers
210 views

“Memory Sinkhole” attack and virtual machines?

Recently a design flaw in some Intel X86 processors was revealed at Blackhat. The flaw enables malicious code to gain access to SMM. The flaw can be exploited by an attacker with administrator ...
1
vote
2answers
126 views

Can virtualization protect me from an infected BIOS?

As you know, there are attacks on the firmware of BIOS and HDD. What if I used some kind of VMS, maybe VirtualBox? Will this protect me from an already infected BIOS (and by that, I mean, no one can ...
5
votes
1answer
96 views

VirtualBox: Ubuntu With or Without Virtual Hard Drive

I've been working on a setup using VirtualBox that uses the Whonix Gateway as a Tor middlebox and I am planning on using Ubuntu for the workstation. I don't plan on storing any information on the ...
9
votes
1answer
304 views

Attacks on keys generated with low entropy

If I were to give someone a two 4096 bits keys, and say one was generated in a Linux OS with very very low entropy available, and one was generated in a Linux OS with more than enough entropy. Would ...