Skip to main content
Search type Search syntax
Tags [tag]
Exact "words here"
Author user:1234
user:me (yours)
Score score:3 (3+)
score:0 (none)
Answers answers:3 (3+)
answers:0 (none)
isaccepted:yes
hasaccepted:no
inquestion:1234
Views views:250
Code code:"if (foo != bar)"
Sections title:apples
body:"apples oranges"
URL url:"*.example.com"
Saves in:saves
Status closed:yes
duplicate:no
migrated:no
wiki:no
Types is:question
is:answer
Exclude -[tag]
-apples
For more details on advanced search visit our help page
Results tagged with
Search options answers only not deleted user 655

Virtualization is the creation of a virtual (rather than actual) version of something, such as an operating system, a server, a storage device or network resources.

5 votes
Accepted

What are the security precautions taken to ensure a virtualized domain can't compromise its ...

Other differences can be made on the means by which virtualization is enforced (i.e. how the hypervisor can trap kernel code). … There is a whole paraphernalia of terms on the subject (virtualization, paravirtualization, emulation, simulation, hypervisor...) which is not completely consensual, and often quite byzantine. …
Thomas Pornin's user avatar
9 votes

How will microvirtualisation change the security field, if at all?

Isolating the browser in a specific jail that it cannot escape is meant to contain damage: if the browser is hijacked, at least the attacker will not obtain immediate access to the rest of the machine …
Thomas Pornin's user avatar
26 votes
Accepted

Is a VM only as secure as its host?

The host machine can impact and alter whatever it wishes in the guest VM. The host can read and write all the memory of the guest, stop and restart it on a per-instruction basis, and, by nature, sees …
Thomas Pornin's user avatar
4 votes

Memory Dumping - Cause for concern in Virtualization?

The host can certainly grab a copy of the complete state of a VM, including what the VM sees as RAM. This is called a "snapshot" and it is a desirable feature. You can imagine the host system as the …
Thomas Pornin's user avatar
2 votes
Accepted

VMWare Fusion Encryption and Snapshotting

I find very little detail on what kind of encryption they use; at best, I find on this page that VMWare Fusion 4: [...] incorporates advanced encryption standard (AES 128-bit) technology to allow …
Thomas Pornin's user avatar
2 votes

Using a VM to access internet when malware blocks internet access?

The way a computer "accesses Internet" is through a tower of systems, each using the one underneath. Schematically, it works like this: An application, let's say Internet Explorer, decides to access …
Thomas Pornin's user avatar
4 votes
Accepted

Are the Trends of Type II Hypervisors and Newer Applications a Security Issue?

However, note that these "enablers" all apply to desktop-related virtualization. … Most users of virtualization on their desktop systems do not do that for security, but for functionality: typically, being able to run Windows applications on a Linux or MacOS X system. …
Thomas Pornin's user avatar
3 votes

Setting up home lab with Snort and Vyatta - looking for resource recommendations or advice

If you set the network type to your virtual machines to Internal Network with the same internal network name (an arbitrary string of your choosing, but the same for all machines), and then configure ( …
Thomas Pornin's user avatar
1 vote
Accepted

Building an VM with Vagrant and connecting with ssh+2FA to protect a bitcoin wallet?

Authentication is about making sure that the peer (say, a connecting client) is who they claim to be; this is the normal first step which enables authorization, i.e. the process of deciding whether th …
Thomas Pornin's user avatar