Posts Tagged ‘ Encryption ’

How VirtuStream does Cloud Security

April 11, 2013
By
Virtustream100x30

On the 4/4 Virtualization Security Podcast, Pete Nicoletti, the chief information security officer for Virtustream, joined us to discuss how VirtuStream does cloud security. VirtuStream runs some of, if not the largest SAP installations in the cloud for very large enterprises around the world. The key to VirtuStream is that they are an Enterprise Cloud…

Read more »

Virtualizing Business Critical Applications – Integrity & Confidentiality

January 14, 2013
By
VirtualizationSecurity

Recently I discussed Virtualizing Business Critical Applications and security, which includes availability, confidentiality, and integrity. However, that discussion was more about visibility into the environment for security operations. I purposely left off the discussion of gaining integrity and confidentiality of the data housed within those business critical applications.

Read more »

Defense in Depth: Encryption within the Virtual Environment

June 14, 2012
By
VirtualizationSecurity

The 5/31 Virtualization Security Podcast we spoke to High Cloud Security about encryption as a defense in depth, and where to place encryption within the virtual environment. This lead to an intriguing discussion about what is actually missing from current virtual environments when it comes to encryption. We can encrypt within each VM and we…

Read more »

Will access to VMware’s source code change the hypervisor threat landscape?

May 1, 2012
By
VMware100x30

Many of the virtualization security people I have talked to are waiting patiently for the next drop of leaked VMware hypervisor code. But the real question in many a mind is whether or not this changes the the threat landscape and raises the risk unacceptably. So let's look at the current hypervisor threat landscape within…

Read more »

Going to the Cloud Safely

October 5, 2011
By

Whether or not to put data into the cloud has been a debate since clouds were first formed. At a recent conference I was asked: with all the security issues you brought up, why should I go to the cloud, I do not know the administrators, nor can I gain cloud visibility, so why go…

Read more »

How to Use the Cloud for Development, Safely

April 21, 2011
By

When CloudFoundry was announced, my first thought was this is a nightmare waiting to happen. Why do I think this, because I was not thinking about Open Source developers but enterprise developers and the biggest issue with enterprise development is that the data used by developers is either made up data, but more often than…

Read more »

Multiple Hybrid Clouds Kludged Together? — Cloud Architecture

March 28, 2011
By

With the diversity of cloud's available today, data being sent from one to another could appear to be a hodge-podge of security. As one colleague put it recently when I asked what he was expecting to maintain integrity of data in motion between clouds: "... what kind of kludge can things end up being when…

Read more »

Latest SMT design requires Complete Visibility by Admin! Yikes!

March 16, 2011
By

I just finished reading, yet another Multi-Tenancy Design/Overview that claims to be secure or trusted. While I will agree that this particular design does cover Availability and some GRC (Governance, Regulatory, and Compliance) it is severely lacking in Integrity and Confidentiality. The design even went as far as saying the cloud/virtual administrator requires "COMPLETE VISIBILITY."…

Read more »

Safe way to Encrypt within a VM – Need for Technology

July 12, 2010
By

Encryption is important, encryption within a VM even more important. But the question is how to do this securely without allowing the encryption keys to be seen by an administrator of the virtual environment and that supports vMotion or LiveMigration. The solution is per VM encrypted memory, but something more robust that makes use of…

Read more »

Featured Solutions