Posts Tagged ‘ Encryption ’

Going to the Cloud Safely

October 5, 2011
By

Whether or not to put data into the cloud has been a debate since clouds were first formed. At a recent conference I was asked: with all the security issues you brought up, why should I go to the cloud, I do not know the administrators, nor can I gain cloud visibility, so why go…

Read more »

How to Use the Cloud for Development, Safely

April 21, 2011
By

When CloudFoundry was announced, my first thought was this is a nightmare waiting to happen. Why do I think this, because I was not thinking about Open Source developers but enterprise developers and the biggest issue with enterprise development is that the data used by developers is either made up data, but more often than…

Read more »

Multiple Hybrid Clouds Kludged Together? — Cloud Architecture

March 28, 2011
By

With the diversity of cloud's available today, data being sent from one to another could appear to be a hodge-podge of security. As one colleague put it recently when I asked what he was expecting to maintain integrity of data in motion between clouds: "... what kind of kludge can things end up being when…

Read more »

Latest SMT design requires Complete Visibility by Admin! Yikes!

March 16, 2011
By

I just finished reading, yet another Multi-Tenancy Design/Overview that claims to be secure or trusted. While I will agree that this particular design does cover Availability and some GRC (Governance, Regulatory, and Compliance) it is severely lacking in Integrity and Confidentiality. The design even went as far as saying the cloud/virtual administrator requires "COMPLETE VISIBILITY."…

Read more »

Safe way to Encrypt within a VM – Need for Technology

July 12, 2010
By

Encryption is important, encryption within a VM even more important. But the question is how to do this securely without allowing the encryption keys to be seen by an administrator of the virtual environment and that supports vMotion or LiveMigration. The solution is per VM encrypted memory, but something more robust that makes use of…

Read more »

Forensics: Guidance for Virtual Environments

April 21, 2010
By

During the last Virtualization Security Podcast, our guest had to postpone so we discussed to several interesting topics all related to Digital Forensics and how encryption would best work within the virtual environment. Our very own Michael Berman, in a previous life was a forensic investigator and had some great insights into the problem of…

Read more »

Featured Solutions