[akg_67]

You can minimize the attack methods/surface but you can't eliminate it completely. There is no fool-proof way that will work in all situations.

- Malware in VM has potential of migrating to host.

- Malware on a network connected separate hardware system has potential of migrating through network.

- Malware on a stand-alone separate hardware system has potential to migrate through external media (USB key/disk) exchange between the two systems.

As you are starting to learn, you most probably will be learning with known malware. As long as you are not analyzing malware that is known to escape from VM to host, you most probably be better of starting with VM for analysis.

When learning a new topic, it is better to get started quickly rather than focusing on finding the perfect setup.