Successfully reported this slideshow.
We use your LinkedIn profile and activity data to personalize ads and to show you more relevant ads. You can change your ad preferences anytime.

Virtualization

web security presented by Hackartist from http://cafe.thinkhack.org

Related Books

Free with a 30 day trial from Scribd

See all

Related Audiobooks

Free with a 30 day trial from Scribd

See all
  • Be the first to comment

Virtualization

  1. 1. • • • • Web Server Webapp Webapp Webapp Webapp Webapp
  2. 2. • • Web Server Webapp Webapp Webapp Webapp Webapp 2차 공격 3차 공격
  3. 3. • • • •
  4. 4. • • • • • •
  5. 5. • • • • • •
  6. 6. • • • • • • • • • Hypervisor(VMM) app app app app Hardware Guest OS Guest OS Guest OS Guest OS mgmt
  7. 7. • • • • • • • Hardware VM A app app app app Hardware Guest OS Guest OS Guest OS Guest OS Guest OS Hardware VM B app
  8. 8. • • • • • • Hypervisor(VMM) app app app app Hardware Modified Guest OS Modified Guest OS Modified Guest OS Modified Guest OS mgmt
  9. 9. • • • • • • • • Operating System Hardware Server Server Server Server Server
  10. 10. • • HTTP://EN.WIKIPEDIA.ORG/WIKI/COMPARISON_OF_APPLICATION_VIRTUAL_M ACHINES • • • • Virtual Environment OS App App App App App
  11. 11. Resource Virtualization • • • • • • •
  12. 12. Virtualization Under Linux(1) • • • • • • •
  13. 13. • • HTTP://FABRICE.BELLARD.FREE.FR/QEMU/ • • • • •
  14. 14. • • • HTTP://BOCHS.SOURCEFORGE.NET/ • • HTTP://WWW.VIRTUALBOX.ORG/ •
  15. 15. • • HTTP://WWW.SWSOFT.COM • HTTP://WWW.PARALLELS.COM/ • HTTP://OPENVZ.ORG/ • • • • •
  16. 16. • • • • •
  17. 17. • HTTP://WWW.COLINUX.ORG/ • HTTP://WWW.TOPOLOGILINUX.COM
  18. 18. • • • GNUWIN32 • GNUWINII • UNXUTILS • UWIN •
  19. 19. • • zfs create -o compress=lz4 -o mountpoint=/usr/jail sys/jail zfs create sys/jail/.base10x64 wget ftp://ftp.freebsd.org/pub/FreeBSD/releases/amd64/10.0-RELEASE/base.txz wget ftp://ftp.freebsd.org/pub/FreeBSD/releases/amd64/10.0-RELEASE/lib32.txz wget ftp://ftp.freebsd.org/pub/FreeBSD/releases/amd64/10.0-RELEASE/games.txz wget ftp://ftp.freebsd.org/pub/FreeBSD/releases/amd64/10.0-RELEASE/src.txz tar -JxvC /usr/jail/.base10x64/ -f base.txz tar -JxvC /usr/jail/.base10x64/ -f lib32.txz tar -JxvC /usr/jail/.base10x64/ -f games.txz tar -JxvC /usr/jail/.base10x64/ -f src.txz
  20. 20. • • cp /etc/resolv.conf /usr/jail/.base10x64/etc/ chroot /usr/jail/.base10x64 passwd mkdir /usr/ports mkdir /usr/home ln -s /usr/home /home cd /etc/mail make aliases freebsd-update fetch install zfs snapshot sys/jail/.base10x64@p0
  21. 21. • • jail_enable="YES" exec.prestart = "/sbin/mount -t nullfs -o ro /usr/ports/ /usr/jail/$name/usr/ports"; exec.start = "/bin/sh /etc/rc"; exec.stop = "/bin/sh /etc/rc.shutdown"; exec.poststop = "/sbin/umount -f /usr/jail/$name/usr/ports"; exec.clean; mount.devfs; mount.fstab = "/etc/fstab.$name"; host.hostname = "$name.somehost.example.com"; allow.nomount;

×