Virtualization Security 2.3

Question 1

Virtual Machines (VM)

Answer 1

• Enable replication of processing units that can be manipulated between different computers.
• Can appear anywhere.

Question 2

Hypervisor

Answer 2

• Low level program
• Allows multiple operating systems to run concurrently on a single host computer.
• Uses a thin layer of code to allocate resources in real time.
• Traffic cop that that controls I/O and memory.

Question 3

VM Vulnerabilities

Answer 3

• Local privilege escalations
• Command injection
• Information disclosure

Question 4

VM Escape

Answer 4

• Breaking out of one VM and interact with the host operating system or hardware that is on the same hypervisor.

Question 5

Issues of VM Escape

Answer 5

• If a VM escape occurs, the attacker could potentially gain access to another VM and have access to more data than permitted.

Question 6

VM Escape Protection

Answer 6

• A way to prevent VM Escape that would allow attackers to access another VM and the associated data.

Question 7

Types of Hypervisors

Answer 7

Type 1 hypervisor and Type 2 hypervisor

Question 8

Hypervisor Type 1

Answer 8

• Designed for speed and efficiency.
• Designed for the high-end server market in enterprises and are designed to allow multiple VMs on a single set of server hardware.

Question 9

Hypervisor Type 2

Answer 9

• Designed for limited numbers of VMs.
• Typically running in a desktop or small server.

Question 10

Resource Policies

Answer 10

• Determine ‘what’, ‘where’, or ‘how’ resources are provisioned.
• Allows organization to set restrictions, manage the resources, and manage cloud costs.