4.2 Security Requirements

Question 1

VM Escape

Answer 1

Threat attempts to get out of an isolated VM and send commands to the underlying hypervisor. VM escape is easier to perform on a Type II hypervisor. To prevent the attack make sure all of the hypervisors remain patched and are up to date

Question 2

VM Hopping

Answer 2

Threat attempts to move from one VM to another on the same host

Question 3

Sandbox escape

Answer 3

Occurs when an attacker circumvents sandbox protections to gain access to the protected OS or other privileged processes.

Question 4

Live migration

Answer 4

Migrates the VM from one host to another while it’s running. Ensure that live migration only occurs on a trusted network or utilizes encryption

Question 5

Data remnants

Answer 5

Leftover pieces of data that may exist in the hard drive which are no longer needed. to mitigate, encrypt virtual machines storage locations and destroy the encryption key

Question 6

VM Sprawl

Answer 6

Uncontrolled deployment of virtual machines