> As Qubes works by means of the principle of security by isolation and every > part of the hardware is running in a virtual machine. Does it make any sense > to use Kaspersky Security for virtualization over the xen hypervisor to > improve security and antihacker security?
The KasperskyOS uses a hosted hypervisor (type-2 hypervisor). The KasperskyOS is based on a reliable proprietary microkernel. They use device emulation or where possible paravirtualization. KasperskyOS is able to use hardware virtualization extensions, but does not require them [1]. I assume they use an mixed approach of binary translation and kernel based virtualization. However, everything is proprietary. This is the reason what makes a technical and security comparison between KasperksyOS and QubesOS impossible. However, it is easy to argue why Xen is a good choice as hypervisor for security projects such as QubesOS: - Xen is open source, which means everybody can audit and anylze it - Xen is used by several large companies in their cloud data center (Amazon AWS, Netflix.... etc.) -> Industrial proven - Xen was developed and maintained for over a decade and has proven to be reasonable secure and flexible. - Xen itself has a very small code base, which means less code running higher privileged CPU modes (Intel VT + AMD-V ring -1, ARM "HYP" mode). > Is going KasperskyOS to suppose a big concurrency to Qubes? No, QubesOS has a very high security standard driven by excellent research from Invsible Things labs. Furthermore, QubesOS is open source, which means people can extend QubesOS for their own use cases. Larger community projects which extend QubesOS are Whonix, the Archlinux-Template, the Mirage-Firewall Unikernel. In addition there are a couple of smaller projects. By the way, KasperskyOS is not the only solution. Bromium vSentry for example is another endpoint virtualization solution. [1] https://os.kaspersky.com/wp-content/uploads/sites/11/2017/02/Kaspersky-Secure-Hypervisor-En.pdf -- You received this message because you are subscribed to the Google Groups "qubes-users" group. To unsubscribe from this group and stop receiving emails from it, send an email to qubes-users+unsubscr...@googlegroups.com. To post to this group, send email to qubes-users@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/qubes-users/f798d2d8-6d04-4433-a4ce-0704b8e45b5e%40googlegroups.com. For more options, visit https://groups.google.com/d/optout.
