Client-side Virtualization

Question 1

Virtualization - Client-side Virtualization

Answer 1

• One computer, many operating systems

* Separate OS, independent CPU, memory, network, etc.

Question 2

The hypervisor - Client-side Virtualization

Answer 2

• Virtual Machine Manager

* Manages the virtual platform and guest operating systems

Question 3

Resource requirements - Client-side Virtualization

Answer 3

• CPU Processor Support - Intel: VT, AMD: AMD-V
• Memory - Above and beyond host OS requirements
• Disk space - Each guest OS has it’s own image
• Network - Configurable on each guest OS

Question 4

Emulation vs. Virtualization - Client-side Virtualization

Answer 4

• Virtualization is a native operating system

* Emulation is one device running processes designed for completely different architecture

Question 5

Hypervisor security - Client-side Virtualization

Answer 5

• Hypervisor is a sweet spot for the bad guys
• VM escaping
  
  • Malware recognizes it’s on a virtual machine
  • Malware compromises the hypervisor
  • Malware jumps from one guest OS to another

Question 6

Guest operating system security - Client-side Virtualization

Answer 6

• Use traditional security controls - Host-based firewall, anti-virus
• Watch out for rogue virtual machines (VMs)

Question 7

Network requirements - Client-side Virtualization

Answer 7

• Most client-side virtual machine managers have their own virtual (internal) networks
• Shared address - VM and host shares the same IP address
• Bridged address - The VM is a device on the physical network
• Private address - The VM does not communicate to the outside