Questions tagged [virtualization]

Virtualization is the creation of a virtual (rather than actual) version of something, such as an operating system, a server, a storage device or network resources.

Filter by
Sorted by
Tagged with
307 votes
9 answers
51k views

What makes Docker more secure than VMs or bare metal?

I recently had a discussion with a Docker expert about the security of Docker vs. virtual machines. When I told that I've read from different sources that it's easier for code running within a Docker ...
user avatar
177 votes
10 answers
187k views

How secure are virtual machines really? False sense of security?

I was reading this CompTIA Security+ SYO-201 book, and the author David Prowse claims that: Whichever VM you select, the VM cannot cross the software boundaries set in place. For example, a virus ...
user avatar
  • 2,301
95 votes
13 answers
19k views

Company computers for competent developers, how can you deal with them?

This is a follow up on Is there a legitimate reason I should be required to use my company’s computer. Mostly, because I see a huge issue in a couple of specific situations. Had I been in a position ...
user avatar
  • 5,657
80 votes
3 answers
40k views

Is it appropriate to use haveged as a source of entropy on virtual machines?

While looking for solutions to entropy pool depletion on virtual machines, I came across an interesting project called haveged, which is based on the HAVEGE algorithm (HArdware Volatile Entropy ...
user avatar
  • 1,136
72 votes
5 answers
92k views

Does a Virtual Machine stop malware from doing harm?

I would like to know if it is safe for the host system of a virtual machine (VM - VirtualBox OSE in my case) to execute malware. Can a virus break out and read or write data from the host system? ...
user avatar
  • 3,882
62 votes
7 answers
9k views

Is it safe to install malware in a VM

Is it safe to install malware in virtual machines? I would like to investigate malware, but I don't want to infect my own computer. Can I install the malware in a VMWare VM, maybe even without ...
user avatar
  • 1,065
57 votes
2 answers
9k views

If a container is compromised does that mean host also compromised?

Recently, I have heard of a new virtualization tech called containers. Suppose the container has been compromised, does this mean the host is also compromised (since the container is a process on a ...
user avatar
54 votes
6 answers
20k views

If malware does not run in a VM why not make everything a VM?

There is a lot of malware that can detect whether it is running inside a VM or sandboxed environment and if such environment is detected it can conceal it self and not execute. So why not make ...
user avatar
  • 1,145
31 votes
5 answers
9k views

If my machine is infected and I run a Virtual Machine inside of it, will the VM also be compromised

I've been researching on virtual machine security and found a lot of articles detailing how an infected VM is isolated (or not) from the host machine. But I couldn't find any answers to the opposite ...
user avatar
30 votes
5 answers
35k views

What do I need to configure, to make sure my software uses /dev/urandom?

When setting up a server, what configuration changes do I need to make sure that all of the software uses /dev/urandom instead of /dev/random? Some servers don't have much entropy in the entropy pool ...
user avatar
  • 98.4k
27 votes
4 answers
10k views

Why can hardware assisted virtualization be a security issue?

Avast antivirus has an option for disabling "Enable hardware-assisted virtualization". If it's enabled, how is it a security issue?
user avatar
27 votes
2 answers
4k views

How do big cloud providers guard against VM escape attacks?

I think it's pretty much unassailable to say that cloud computing as we know it depends on the concept of the robustness of virtual machines. Where one can depend on the security of VMs they allow ...
user avatar
26 votes
1 answer
8k views

Meltdown and Virtual Machines

This question originated from a discussion about VMs not being vulnerable to Meltdown. Can Meltdown "break out" of a virtual machine, so to speak? What is meant by this is: Can a program (with any ...
user avatar
  • 1,004
25 votes
6 answers
14k views

Would a VM such as Virtualbox be my best option for everyday security while working?

I run a small business out of my home and I'm not really doing anything labor intensive, no games and I'm not cutting any code or anything of that nature. A lot of what I do is phone based sales, so I'...
user avatar
21 votes
8 answers
47k views

Is it safe to use virtual machines when examining malware?

We want to study for the CEH program and have downloaded 12 DVDs that 6 DVDs are software key-loggers, Trojans, etc. that are all detected by antivirus. This prevents us from examining them and ...
user avatar
20 votes
3 answers
10k views

Is it safe to use rng-tools on a virtual machine?

I am currently working on an app that needs to create GPG key pairs using the gpg tool. Unfortunately, this tool takes a long time to generate a key pair if there is insufficient entropy/randomness ...
user avatar
19 votes
4 answers
27k views

Replacement for DVL (Damn Vulnerable Linux)? [closed]

I've recently spotted that DVL (Damn Vulnerable Linux) has gone inactive. My first question is what happened to cause them to stop releasing it? Secondly, I have found some references to other ...
user avatar
  • 289
18 votes
3 answers
5k views

Can a guest virtual machine be compromised by a virus on the host machine?

All questions ask about the other way round, ie. can a virtual machine compromise the host. But I'm asking can a virus on the host machine compromise the guest virtual machine?
user avatar
17 votes
5 answers
3k views

Is a VM only as secure as its host?

Question If one installs a VM with "high security" on a host machine with "low security", will the VM be only as secure as the machine it's installed on, or will the high-security aspects from the VM ...
user avatar
  • 569
16 votes
6 answers
3k views

Securely building a local pentest lab in a VM

I'd like to set up OWASP WebGoat or a similar vulnerable web app in a VM (probably VirtualBox on Linux). For convenience's sake, I'd like to get it running on one of the primary machines I use (say, a ...
user avatar
  • 13k
15 votes
1 answer
5k views

Norton detects intrusion attempt from virtual machine - how is this possible?

Sometimes I have to fix an infected WordPress website. I always check the infected website from a virtual machine (Oracle VM VirtualBox). I'm also running Norton 360 DeluXe on the host machine. In the ...
user avatar
  • 153
15 votes
2 answers
2k views

Protection of Keys/Passwords on Virtual Hardware (XEN, KVM, VMWare, etc.)

Is there any reasonable way to secure data on virtual hardware? What I mean by "virtual hardware" is the various hosted systems that one can rent from various online hosters, that run on top of XEN, ...
user avatar
  • 313
15 votes
5 answers
3k views

Are there ways to protect the guest kernels at the hypervisor level?

Let's say I have a linux guest running in xen and I want xen to check the integrity of the guest kernel so that I know there aren't any rootkits, or similar, active. Is there a way to accomplish this ...
user avatar
  • 513
15 votes
3 answers
4k views

How long to re-seed /dev/urandom in a virtual machine?

I have read plenty about the distinction between /dev/random and /dev/urandom. I understand that the prevailing advice is to use /dev/urandom. The explanation - that 256 bits of 'proper' randomness ...
user avatar
  • 628
15 votes
2 answers
940 views

When do shared disks "leak" data to other VMs, and how is that mitigated?

Inspired by this answer, I would like to know what are some common threats and mitigation techniques used to prevent one VM from leaking data to another via the shared storage infrastructure. ...
user avatar
14 votes
3 answers
9k views

Should Virtual Machines be patched for Meltdown and Spectre?

In Meltdown and Virtual Machines it was clarified that at least Spectre works crossing VMs. This of course means that the Hypervisor must be patched, but Should the VM OS be patched as well? Not ...
user avatar
  • 261
14 votes
5 answers
27k views

How to detect hosts running in virtual machines with nmap?

I have to determine if a given subnet has virtual hosts. Are there any ideas about what switches to use?
user avatar
  • 781
14 votes
3 answers
4k views

Can a hypervisor rootkit enable hardware-assisted virtualization when it has been disabled by the BIOS?

I was recently reading An Introduction to Hardware-Assisted Virtual Machine (HVM) Rootkits (PDF), and it wasn't entirely clear about the conditions under which the hypervisor rootkit can start ...
user avatar
14 votes
1 answer
301 views

How safely allow users to run arbitrary JVM code on a server?

I'm planning a service that will require allowing users to run arbitrary JVM code on a server. I'm planning to sandbox the code, but I know that the JVM has traditionally had security holes, which is ...
user avatar
13 votes
4 answers
2k views

Source code security

We have about 20 developers working in a heterogeneous environment, mostly using company laptops or desktops. We run Windows 7 on desktops/laptops and a mixture of Linux distros (Ubuntu/CentOS). ...
user avatar
  • 253
13 votes
1 answer
8k views

What is Virtual Machine Introspection?

I have seen it presented as a special security technique but it seems like it basically means automated security monitoring of your virtual environment. Is that the basic idea?
user avatar
  • 1,437
13 votes
3 answers
1k views

Are virtualized environments vulnerable to the Row Hammer attack?

Row Hammer is an exploit which relies on RAM defects to get unrestricted access to the RAM content, allowing to read/write otherwise protected memory and to get higher privileges on the system. To ...
user avatar
12 votes
8 answers
13k views

How anonymous is my setup?

my friend and I are trying to make the most anonymous setup for a computer to do things across the internet without being known the location from which it came. Our setup is as follows: A windows ...
user avatar
12 votes
1 answer
764 views

Why is EC2 not vulnerable to VENOM?

I saw the advisory stating that EC2 instances are not vulnerable to VENOM. My understanding is that EC2 runs on Xen, and that VENOM affects XEN. Can anyone explain why EC2 is not vulnerable? Do ...
user avatar
  • 1,024
12 votes
1 answer
20k views

How to ensure that VirtualBox guests can't break out of the vm to get access to the host machine? [duplicate]

Possible Duplicate: How secure are virtual machines really? False sense of security? E.g. on Ubuntu/Fedora - if I have VirtualBox installed and I'm running guests in it, then how can I make it ...
user avatar
  • 6,129
11 votes
5 answers
13k views

Is it safe to run untrusted application inside a Virtual Machine [duplicate]

I have some untrusted software. I plan to run them on a guest Windows 7 on my host Windows 8 OS using Oracle VirtualBox. In the worst case, will only my guest OS be affected? Can the hacker access ...
user avatar
  • 131
11 votes
3 answers
25k views

Exactly how secure is VM browsing?

I generally do all of my web browsing in a VM. I have one "safe" VM running Ubuntu that has guest services installed. I generally only go to sites I deem are trustworthy here. I also have an "unsafe" ...
user avatar
11 votes
2 answers
2k views

What are the risks of antivirus exclusions for virtual machines’ files?

For performance reasons, I would like to whitelist the following files from an AV protection: .vmdk (VMWare virtual disk file); .lck (VMWare lock file for disk consistency, created in the same ...
user avatar
10 votes
1 answer
16k views

Full Disk Encryption within a VM, how secure is it?

Just a quick query on basically how to secure a VM for a home computer for a number of uses (such as securing work related data in a good enough fashion whilst in its native environment). I'm not ...
user avatar
10 votes
1 answer
3k views

Attacks on keys generated with low entropy

If I were to give someone a two 4096 bits keys, and say one was generated in a Linux OS with very very low entropy available, and one was generated in a Linux OS with more than enough entropy. Would ...
user avatar
  • 2,253
10 votes
1 answer
2k views

Where does a Hyper-V guest get its entropy when generating a certificate authority key pair?

According to findings by the EFF's SSL observatory, there are "tens of thousands of keys that offer effectively no security due to weak random number generation algorithm." My understanding ...
user avatar
  • 569
10 votes
0 answers
326 views

Penetration-resistance of a HaLVM unikernel

A HaLVM unikernel is a Haskell program compiled with a modified version of the Glasgow Haskell Compiler to produce a standalone Xen kernel, which will boot on any Xen PV machine instance. A HaLVM ...
user avatar
  • 393
9 votes
3 answers
6k views

Is a Windows XP virtual machine with no network connection safe from hacking? [duplicate]

If I install Windows XP as a Virtual Machine with no network connection, is it safe from being hacked? My main OS would be Windows 8.1 with internet.
user avatar
  • 151
9 votes
4 answers
12k views

Is dual-booting an OS more or less secure than running a virtual machine?

I run two operating systems on two separate disk partitions on the same physical machine (a modern MacBook Pro). In order to isolate them from each other, I've taken the following steps: Configured /...
user avatar
  • 1,310
9 votes
2 answers
930 views

Does Docker provide the same security as a vm [duplicate]

Does Docker provide the same level of security/isolation as a virtual machine running over a hypervisor? If not, how can that be achieved?
user avatar
  • 1,592
9 votes
1 answer
726 views

How hard is it to distinguish between remote access to a virtual machine vs a piece of hardware?

Let's say I have full access to a remote machine (specifically, root on a Linux). What is the best method to check whether this is a real piece of hardware or a virtual machine? Most of the methods ...
user avatar
  • 186
9 votes
2 answers
520 views

How effective is Windows KDP for exploit mitigation in practice?

Windows Kernel Data Protection is a kernel security feature which appears to use Extended Page Tables (EPT, a hardware virtualization feature) to enforce read-only pages. How effective is this at ...
user avatar
  • 64.1k
9 votes
1 answer
2k views

In VMs, do shared folders reduce security effectiveness?

VirtualBox offers the option of using shared folders, others probably offer the same thing. I am not sure whether the host is directly accessing the memory of the guest, or if there some process which ...
user avatar
  • 113
9 votes
1 answer
1k views

Can virtual machines be used to isolate vulnerable software?

I have had a look at most of the previous questions about virtual machines (VMs) and they all appear to be focused on hosting malware in the VM and preventing it breaking out of the VM. What I can’t ...
user avatar
  • 2,923
9 votes
2 answers
4k views

CTF competitions/challenges that are Windows based?

I've been messing about in CTF's for a while and I also do pen-testing professionally, what i've noticed is a distinct lack of CTF competitions using windows environments. This is in stark contrast ...
user avatar
  • 11.4k

1
2 3 4 5
10