I'm deploying a web application on a linux server (ubuntu) on virtual machine (In VMWare ESX 5.1 and the host machine is Windows)

I need to protect the entire application and guest OS from being copied to another physical host

Is this possible?
Can I make the Linux guest to work just on that host?
Can I identify host machine from guest OS?
How?

Thanks

up vote 2 down vote accepted

In a well-working virtualisation environment, the guest can not, should not and may not be able to identify the host if the host doesn't explicitly allow so, this is of course completely oposite to your requirement of something like a DRM system for VMs.

This leaves you with a few options, some of which are:

  • Demand the MAC address of the Host being entered into your application, then rarp and ping it - the roundtrip time should allow a diagnosis.
  • Use cryptography and a USB passthrough dongle

Let me add, that the first rule of DRM is, that DRM does not work - so reconsider if you want to pour resources into what is finally a lost cause.

Let me give my overview, based on virtualization experience. Any malware with a network component will propagate to wherever their addressing/routing allows them to. Regular/well-known malwares tend to only operate in ‘user mode’, in a such a covert channel. If you are sharing CPU's, a busy process on one VM can effectively communicate state to another VM (that's your prototypical timing covert channel). Storage covert channel would be a bit harder as the virtual disks tend to have a hard limit on them, so unless you have a system that can over-commit disk space, it should not be an issue.

  • I don't see any mentions of malware in the question. Did you post your answer in the right place? – Dmitry Grigoryev Apr 27 '16 at 20:27
  • I don't have anything to do with malwares!!! I'm just deploying my application as a VM and I want to be able to prevent user to copy my application to other hosts without my permission! – RYN Apr 30 '16 at 2:30
  • Sorry, guys, I guees I misunderstood the question. – Cyril Cooper May 12 '16 at 11:39

Your Answer

 

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.