The NIST Information Security and Privacy Advisory Board (ISPAB) paper “Perspectives on Cloud
Computing and Standards” specifies potential advantages and disdvantages of virtualization.
Which of the following disadvantages does it include? Each correct answer represents a complete
solution. Choose all that apply.
A.
It increases capabilities for fault tolerant computing using rollback and snapshot features.
B.
It increases intrusion detection through introspection.
C.
It initiates the risk that malicious software is targeting the VM environment.
D.
It increases overall security risk shared resources.
E.
It creates the possibility that remote attestation may not work.
F.
It involves new protection mechanisms for preventing VM escape, VM detection, and VM-VM
interference.
G.
It increases configuration effort because of complexity and composite system.
Explanation:
The potential security disadvantages of virtualization are as follows: It increases
configuration effort because of complexity and composite system. It initiates the problem of how to
prevent overlap while mapping VM storage onto host files. It introduces the problem of virtualizing
the TPM. It creates the possibility that remote attestation may not work. It initiates the problem of
detecting VM covert channels. It involves new protection mechanisms for preventing VM escape,
VM detection, and VM-VM interference. It initiates the possibility of virtual networking configuration
errors. It initiates the risk that malicious software is targeting the VM environment.
It increases overall security risk shared resources, such as networks, clipboards, clocks, printers,
disadvantages of virtualization, as described in the NIST Information Security and Privacy
Advisory Board (ISPAB) paper “Perspectives on Cloud Computing and Standards”.