VMware to make server product free

TalkBack 27 of 27:

« Previous

• Thread View
• Flat View

Malware

I have run Windows 2000 inside a VMware vm. The security problems are just the same in the vm as they are in the outside world. Malware can hide in a operating system running in a vm. However the VMware technique is to block all access to the outside world except the network. Thus the inside os can go haywire and not affect the host os. The inside os can crash the vm without affecting the host os. If you don't want this to happen, you have to have the same virus and bot protection installed on the inside os as you would have if it were the main os. The opening to the network does pose a risk to other machines on the network. A bot on the inside os can send out packets and infect other machines on the network. Actually it would be possibe for an inside Windows os to infect a host Windows os throught the network. Filters on the network trafic between the inside os and the host os are appropriate. Since an os on a vm can be compromised, and since the entire vm can be sent to other users, one has to be careful to use standard security procedures on the os in the vm to make sure that it is not contaminated before it is shared with other persons. One advantage to the VMware technique is that one can install a pure os and not connect it to the network. Then a virgin system can be shared with other users. To remain pure it has to be kept off the network and new software has to be checked before installation.

Posted by: dow@...   Posted on: 04/04/06 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Scaling Out With Oracle RAC 10g on Dell Clusters Dell Oracle Database 10g is designed to enable enterprise grid computing, which ... Download Now
• Enterprise Security Reporter for SharePoint Version 3.6.3 ScriptLogic Enterprise Security Reporter? for SharePoint provides the administrator ... Download Now
• Addressing Compliance Requirements for Privacy, Data Retention, and e-Discovery Trend Micro Protecting individual and financial data, retaining data, and meeting ... Download Now