virtualization

••

••

Web Server

Webapp Webapp Webapp Webapp Webapp

••

Web Server

Webapp Webapp Webapp Webapp Webapp

2차공격

3차공격

•

•••

••••••

•

•••••

•

••••••••

Hypervisor(VMM)

app app app app

Hardware

Guest OS

Guest OS

Guest OS

Guest OS mgmt

•

•••

•••

Hardware VM A

app app app app

Hardware

Guest OS

Guest OS

Guest OS

Guest OS

Guest OS

Hardware VM B

app

•

•••

••

Hypervisor(VMM)

app app app app

Hardware

ModifiedGuest OS

ModifiedGuest OS

ModifiedGuest OS

ModifiedGuest OS mgmt

•

•••••••

Operating System

Hardware

Server Server Server Server Server

•

• HTTP://EN.WIKIPEDIA.ORG/WIKI/COMPARISON_OF_APPLICATION_VIRTUAL_MACHINES

••••

Virtual Environment

OS

App App App App App

Resource Virtualization

•••••••

Virtualization Under Linux(1)

••

•••

••

•• HTTP://FABRICE.BELLARD.FREE.FR/QEMU/

•••••

••

• HTTP://BOCHS.SOURCEFORGE.NET/

•• HTTP://WWW.VIRTUALBOX.ORG/

•

•• HTTP://WWW.SWSOFT.COM

• HTTP://WWW.PARALLELS.COM/

• HTTP://OPENVZ.ORG/

••

•••

•••••

•HTTP://WWW.COLINUX.ORG/

•HTTP://WWW.TOPOLOGILINUX.COM

••• GNUWIN32• GNUWINII• UNXUTILS

• UWIN•

•

•

zfs create -o compress=lz4 -o mountpoint=/usr/jail sys/jailzfs create sys/jail/.base10x64

wget ftp://ftp.freebsd.org/pub/FreeBSD/releases/amd64/10.0-RELEASE/base.txzwget ftp://ftp.freebsd.org/pub/FreeBSD/releases/amd64/10.0-RELEASE/lib32.txzwget ftp://ftp.freebsd.org/pub/FreeBSD/releases/amd64/10.0-RELEASE/games.txzwget ftp://ftp.freebsd.org/pub/FreeBSD/releases/amd64/10.0-RELEASE/src.txztar -JxvC /usr/jail/.base10x64/ -f base.txztar -JxvC /usr/jail/.base10x64/ -f lib32.txztar -JxvC /usr/jail/.base10x64/ -f games.txztar -JxvC /usr/jail/.base10x64/ -f src.txz

•

•

cp /etc/resolv.conf /usr/jail/.base10x64/etc/chroot /usr/jail/.base10x64passwdmkdir /usr/portsmkdir /usr/homeln -s /usr/home /homecd /etc/mailmake aliasesfreebsd-update fetch install

zfs snapshot sys/jail/.base10x64@p0

•

•jail_enable="YES"

exec.prestart = "/sbin/mount -t nullfs -o ro /usr/ports/ /usr/jail/$name/usr/ports";exec.start = "/bin/sh /etc/rc";exec.stop = "/bin/sh /etc/rc.shutdown";exec.poststop = "/sbin/umount -f /usr/jail/$name/usr/ports";exec.clean;mount.devfs;mount.fstab = "/etc/fstab.$name";host.hostname = "$name.somehost.example.com";allow.nomount;