To minimize vulnerability to VM escape, Skoudis recommends that you: Keep virtual machine software patched. Install only the resource-sharing features that you really need. Keep software installations to a minimum because each program brings its own vulnerabilities.