virtualization
DESCRIPTION
web security presented by Hackartist from http://cafe.thinkhack.orgTRANSCRIPT
••
••
Web Server
Webapp Webapp Webapp Webapp Webapp
••
Web Server
Webapp Webapp Webapp Webapp Webapp
2차공격
3차공격
•
•••
••••••
•
•••••
•
••••••••
Hypervisor(VMM)
app app app app
Hardware
Guest OS
Guest OS
Guest OS
Guest OS mgmt
•
•••
•••
Hardware VM A
app app app app
Hardware
Guest OS
Guest OS
Guest OS
Guest OS
Guest OS
Hardware VM B
app
•
•••
••
Hypervisor(VMM)
app app app app
Hardware
ModifiedGuest OS
ModifiedGuest OS
ModifiedGuest OS
ModifiedGuest OS mgmt
•
•••••••
Operating System
Hardware
Server Server Server Server Server
•
• HTTP://EN.WIKIPEDIA.ORG/WIKI/COMPARISON_OF_APPLICATION_VIRTUAL_MACHINES
••••
Virtual Environment
OS
App App App App App
Resource Virtualization
•••••••
Virtualization Under Linux(1)
••
•••
••
••
• HTTP://BOCHS.SOURCEFORGE.NET/
•• HTTP://WWW.VIRTUALBOX.ORG/
•
•• HTTP://WWW.SWSOFT.COM
• HTTP://WWW.PARALLELS.COM/
• HTTP://OPENVZ.ORG/
••
•••
•••••
•HTTP://WWW.COLINUX.ORG/
•HTTP://WWW.TOPOLOGILINUX.COM
••• GNUWIN32• GNUWINII• UNXUTILS
• UWIN•
•
•
zfs create -o compress=lz4 -o mountpoint=/usr/jail sys/jailzfs create sys/jail/.base10x64
wget ftp://ftp.freebsd.org/pub/FreeBSD/releases/amd64/10.0-RELEASE/base.txzwget ftp://ftp.freebsd.org/pub/FreeBSD/releases/amd64/10.0-RELEASE/lib32.txzwget ftp://ftp.freebsd.org/pub/FreeBSD/releases/amd64/10.0-RELEASE/games.txzwget ftp://ftp.freebsd.org/pub/FreeBSD/releases/amd64/10.0-RELEASE/src.txztar -JxvC /usr/jail/.base10x64/ -f base.txztar -JxvC /usr/jail/.base10x64/ -f lib32.txztar -JxvC /usr/jail/.base10x64/ -f games.txztar -JxvC /usr/jail/.base10x64/ -f src.txz
•
•
cp /etc/resolv.conf /usr/jail/.base10x64/etc/chroot /usr/jail/.base10x64passwdmkdir /usr/portsmkdir /usr/homeln -s /usr/home /homecd /etc/mailmake aliasesfreebsd-update fetch install
zfs snapshot sys/jail/.base10x64@p0
•
•jail_enable="YES"
exec.prestart = "/sbin/mount -t nullfs -o ro /usr/ports/ /usr/jail/$name/usr/ports";exec.start = "/bin/sh /etc/rc";exec.stop = "/bin/sh /etc/rc.shutdown";exec.poststop = "/sbin/umount -f /usr/jail/$name/usr/ports";exec.clean;mount.devfs;mount.fstab = "/etc/fstab.$name";host.hostname = "$name.somehost.example.com";allow.nomount;