Virtualization & VMware

Virtualization Problem in developing new computer system is operating system for develop the system only compatible with the hardware from same vendor and cannot be implemented in another machines that have different architecture. For example, Windows application binaries will not directly execute on another processor. Virtualization used to eliminates these constraint and enables a much higher degree of portability and flexibility . Virtualization produced by adding software to an execution platform and give it appearance of different platform. Virtual Machine Virtual machine is one of virtualization environment or duplicate of real machine. Virtual machine environment created by Virtual Machine Monitor (VMM). VMM reproduces everything from the CPU instruction to the I/O devices in software of operating system which it run on. The underlying operating system is called host operating system, the operating system which runs on VMM is called guest operating system. Host operating system and guest operating system can be the same or different type of operating system. For example, Windows can runs as host operating system and Fedora as guest operating system and vice versa. VMware Workstation VMware is example of a more recent VMM that has been developed. Another close environment which also provides virtualization is called emulator. Difference between emulator and VMM is VMM only let one guest operating system that run on the host system. VMware makes it possible for PC user to use multiple operating system in same PC. User can run multiple OS side by side and by just clicking mouse you can switch to different OS and share files by just drag and drop. VMware also have ability to preserves the state by taking a "snapshot", so user can do testing on virtual machine without worying the system will corrupt. VMware Installation VMware can be downloaded from http://www.vmware.com/download/ws/ Installation

  1. Double click VMware launcher to start the installation wizard.
  2. Click Next.
  3. Choose Typical set up (if you already familiar with VMware you can choose Custom to choose features that you want to instal).
  4. Choose the location for VMware installation.
  5. Configure the sortcut and then click Next.
  6. Click Install to start the installation, this will take several minutes to finish.
  7. Enter the Serial Number for VMware (you can get the serial number inside your VMware folder).
  8. Click Finish to finish the installation.
Creating Disk Image
  1. RunVMware, from Home tab click New Virtual Machine, to open the virtual machine wizard. Image Hosted by UploadHouse.com
  2. Click Next to continue.
  3. Choose Typical configuration, then click Next.
  4. Choose the type of OS to be installed on virtual machine.
  5. Name the virtual machine and specify where the disk image for virtual machine will be stored in hard disk.
  6. For the Network Type select Use host-only Networking.
  7. Specify disk capacity for virtual machine. Initially the size of disk image you created is small and as you installed virtual machine with OS and software, the will increase up to the storage capacity set in this configuration. Select Allocate disk space now and click Finish, this will take several.
  8. Click Close to end the installation wizard.
Installing Windows Server 2003 in virtual machine
  1. Place Windows Server 2003 installer CD in cdroom drive.
  2. From command menu click start the virtual machine or you can click start button on toolbar.
  3. Once virtual machine start booting, you will see windows server 2003 installation page, just follow windows server 2003 installation steps.
  4. After installation finish, you will see windows server 2003 login page.
  5. Click on the console to start using windows server 2003, to get mouse pointer back to host desktop use CTRL + ALT.
  6. To take a snapshot of your OS, just clicking button snapshot on toolbar, use button Revert if anything happened to your OS and choose your previous state.
  7. To manage size of your console, you can click on Quick switch or select Full screen from View on the toolbar.
Regards ^^

Introduction to Information Security

Information security

Image Hosted by UploadHouse.com
What is security?? Security is state of being secure from any danger and protected from those whom would do harm. Information security mean that information is being protected and also the system and hardware for transmit the information being protected. There are 3 step for being secure: 1. Detection Detect any danger that may harm your system by using scanner such as virus scanner, internet scanner, and Web server scanner. 2. Prevention By setting your proxy and turn on your firewall, you already prevent your system from any danger such as virus. 3. Recovery Recover your system when it being infected by virus or anything that would damage your system. you can use cryptography technique. Security principles : Confidentiality is prevention of unauthorized disclosure of information. Integrity is prevention of unauthorized modification of information. Availability is prevention of unauthorized withholding of information. Security attack is classified into 2 types, passive attack and active attack. Passive attacks is monitoring the transmission. Usually used to obtain the information that is being transmitted. Passive attacks divide into 2 types, release of message content and traffic analysis. Active attacks is involve some modification of data stream or creation of false stream to obtain an authorization of the data. Types of active attacks are masquerade, replay, modification of messages, and denial of services.
Passive attacks vs. Active attacks
  • Passive attacks

o Very difficult to detect

o Feasible to prevent the success of this attack

o Prevention rather than detection

  • · Active attacks

o Difficult to prevent

o Instead, the goal is to detect active attacks and to recover from any disruption or delays caused by them

o If the detection has a deterrent effect, it may also contribute to prevention.

There are several ways to deal with harm that occurs when a threat is realized against a vulnerability.
  • Prevent it, by blocking the attack or closing the vulnerability.
  • Deter it, by making the attack harder, but not impossible.
  • Detect it, either as it happens or some time after the fact.
  • Deflect it, by making another target more attractive.
  • Recover from its effect.
Encryption is making the interpretation is meaningless by scrambling the data without the intruder's knowing how the scrambling was done. Encryption enable us to provide security while accomplishing an important system or network task. Security services:
  • Authentication is assurance that the communicating entity is the one claimed or assurance that the source of received data is as claimed.
  • Access control is prevention of unauthorized use of resource.
  • Data confidentiality is protect data from unauthorized disclosure.
  • Data integrity is assurance that the data received is as sent by authorized entity.
  • Non repudiation is to proof that the data sent by specified party and received by specified party.
Security mechanism is any process that is designed to detect, prevent, or recover from any security attack. Security mechanism divided into 2 classes, and Specific Security Mechanisms and Pervasive Security Mechanisms.
Image Hosted by UploadHouse.com Image Hosted by UploadHouse.com