Virtualization software is complex and relatively new. Joshua Feldman, in CISSP Study Guide (Second Edition), 2012 Virtualization security issues A similar physical to virtual shift is occurring with firewalls.Įric Conrad. NIDS vendors are beginning to offer virtual IDS products, running in software on the host, and capable of inspecting host-guest and guest-guest traffic. A traditional NIDS connected to a physical SPAN port or tap cannot see traffic passing from one guest to another on the same host. Many network-based security tools, such as network intrusion detection systems, can be blinded by virtualization. The bug exists in the shared folder feature of the Windows client-based virtualization software.” Known virtualization escape bugs have been patched, but new issues may arise. Trend Micro reports: “Core Security Technologies has very recently reported of a bug that allows malicious users to escape the virtual environment to actually penetrate the host system running it.
The risk of virtualization escape (called VMEscape, where an attacker exploits the host OS or a guest from another guest) is a topic of recent research.
Virtualization is no replacement for a firewall: never combine guests with different security requirements (such as DMZ and internal) onto one host. As discussed previously, complexity is the enemy of security: the sheer complexity of virtualization software may cause security problems.Ĭombining multiple guests onto one host may also raise security issues. Joshua Feldman, in CISSP Study Guide (Third Edition), 2016 Virtualization Security Issues
0 kommentar(er)
