Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I have a VPS with sensitive data on it.

The host runs KVM and I have a guest with Ubuntu on it.

The people running the host, how easy is it for them to extract data from my guest while it's running live? I have encrypted the sensitive data so they could dump the memory and get the key, but is there any other way for them to access the data when it's running live besides dumping the memory, cloning the drive an unencrypting it?

share|improve this question

1 Answer 1

There is always a way that someone "could" get to the data if they want it bad enough. The key with security is putting enough of it in place that will deter someone from even trying, and minimize your exposure risk by controlling the environment as much as possible. With a VPS, you control virtually nothing about the environment. With sensitive data, it's generally recommended that you run on dedicated hardware, preferably hardware that you own, located in a facility with restricted physical access to said hardware. Personally, I would not put sensitive information in a virtual environment I didn't control without some specific contractual obligations in place that address these issues.

share|improve this answer
    
Correct, however, I'd like to know exactly how from a technical perspective they would do it in this type of environment, how easy it is for them.. –  samuelf Jun 24 '10 at 15:48

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.