Hypervisors + Containerization

The primary responsibility of the hypervisor

is enforcing isolation between virtual machines

Type I hypervisors

also known as bare-metal hypervisors, operate directly on top of the underlying hardware. The hypervisor then supports guest operating systems for each virtual machine

Type II hypervisors

run as an application on top of an existing operating system. In this approach, the operating system supports the hypervisor and the hypervisor requests resources for each guest operating system from the host operating system

Containers

provide application-level virtualization. ___ package applications allow them to be traded as units of virtualization that become portable across operating systems and hardware platforms

Specific ways we can secure containers recommended by NIST include

• Using container-specific host operating systems

• Segmenting containers by risk profile and purpose

• Using container-specific vulnerability management security tools