Elsevier, Inc., the author(s), and any person or firm involved in the writing, editing, or production (collectively "Makers") of this book ("the Work") do not guarantee or warrant the results to be obtained from the Work. There is no guarantee of any kind, expressed or implied, regarding the Work or its contents. The Work is sold AS IS and WITHOUT WARRANTY. You may have other legal rights, which vary from state to state. In no event will Makers be liable to you for damages, including any loss of profits, lost savings, or other incidental or consequential damages arising out from the Work or its contents. Because some states do not allow the exclusion or limitation of liability for consequential or incidental damages, the above limitation may not apply to you. You should always use reasonable care, including backup and other appropriate precautions, when working with computers, networks, data, and files. Syngress Media®, Syngress®, "Career Advancement Through Skill Enhancement®," "Ask the Author UPDATE®," and "Hack Proofing®," are registered trademarks of Elsevier, Inc. "Syngress: The Definition of a Serious Security Library"TM, "Mission CriticalTM," and "The Only Way to Stop a Hacker is to Think Like OneTM" are trademarks of Elsevier, Inc. Brands and product names mentioned in this book are trademarks or service marks of their respective companies. Unique Passcode 48305726 PUBLISHED BY Syngress Publishing, Inc. Elsevier, Inc. 30 Corporate Drive Burlington, MA 01803 Virtualization for Security Including Sandboxing, Disaster Recovery, High Availability, Forensic Analysis, and Honeypotting Copyright © 2009 by Elsevier, Inc. All rights reserved. Printed in the United States of America. Except as permitted under the Copyright Act of 1976, no part of this publication may be reproduced or distributed in any form or by any means, or stored in a database or retrieval system, without the prior written permission of the publisher, with the exception that the program listings may be entered, stored, and executed in a computer system, but they may not be reproduced for publication. Printed in the United States of America 1 2 3 4 5 6 7 8 9 0 ISBN 13: 978-1-59749-305-5 Publisher: Laura Colantoni Project Manager: Andre Cuello Acquisitions Editor: Brian Sawyer Page Layout and Art: SPI Technical Editor: John Hoopes Developmental Editor: Gary Byrne Cover Designer: Michael Kavish Indexer: SPI Copy Editors: Leslie Crenna, Emily Nye, Adrienne Rebello, Gail Rice, Jessica Springer, and Chris Stuart For information on rights, translations, and bulk sales, contact Matt Pedersen, Commercial Sales Director and Rights, at Syngress Publishing; email m.pedersen@elsevier.com. Library of Congress Cataloging-in-Publication Data Hoopes, John. Virtualization for security : including sandboxing, disaster recovery, high availability / John Hoopes. p. cm. ISBN 978-1-59749-305-5 1. Virtual computer systems. 2. Virtual storage (Computer sciences)--Security measures. 3. Database security. I. Title. QA76.9.V5H66 2009 005.8--dc22 2008044794