Posts Tagged ‘ SMT ’

Will access to VMware’s source code change the hypervisor threat landscape?

May 1, 2012
By
VMware100x30

Many of the virtualization security people I have talked to are waiting patiently for the next drop of leaked VMware hypervisor code. But the real question in many a mind is whether or not this changes the the threat landscape and raises the risk unacceptably. So let's look at the current hypervisor threat landscape within…

Read more »

State of Secure Multitenancy Today

September 30, 2011
By

On 9/22 was held the Virtualization Security Podcast featuring Anil Karmel, Solutions Architect at Los Alamos National Library (LANL), to discuss their implementation of secure multi-tenant Cloud. LANL makes extensive use of the entire VMware product suite from vCloud Director down to the vShield components to implement their SMT cloud. They have also added into…

Read more »

Latest SMT design requires Complete Visibility by Admin! Yikes!

March 16, 2011
By

I just finished reading, yet another Multi-Tenancy Design/Overview that claims to be secure or trusted. While I will agree that this particular design does cover Availability and some GRC (Governance, Regulatory, and Compliance) it is severely lacking in Integrity and Confidentiality. The design even went as far as saying the cloud/virtual administrator requires "COMPLETE VISIBILITY."…

Read more »

Safe way to Encrypt within a VM – Need for Technology

July 12, 2010
By

Encryption is important, encryption within a VM even more important. But the question is how to do this securely without allowing the encryption keys to be seen by an administrator of the virtual environment and that supports vMotion or LiveMigration. The solution is per VM encrypted memory, but something more robust that makes use of…

Read more »

Risky Social Behaviors akin to Multi-Tenancy Risks

June 17, 2010
By

Can we use some of this Risky Social Behaviors post to aid us in finding an adequate definition for secure multi-tenancy? Perhaps more to the point it can define how we look at multi-tenancy today. On a recent VMware Communities podcast we were told two things that seem contradictory to current security thinking. The first…

Read more »

Defining Tenants for Secure Multi-Tenancy for the Cloud

June 1, 2010
By

The panel of the Virtualization Security Podcast on 5/27/2010 was joined by an attorney specializing in the Internet space. David Snead spoke at InfoSec and made it clear that there was more to secure multi-tenancy than one would imagine. The first question was "how would you define tenant?" which I believe is core to the…

Read more »

Secure Multi-Tenant Virtualization – How to get there?

May 19, 2010
By

Due to what I stated during GestaltIT’s TechFieldDay, I was invited with Bas Raayman and others to discuss Secure Multi-Tenancy (SMT) in more detail with Chuck Hollis at EMC World. In addition, during one of the Keynotes SMT was renamed from Secure Multi-Tenancy to Simple Multi-Tenancy. The current Cisco VMware Netapp solution is plainly not…

Read more »

Cisco – VMware – NetApp an Interesting Approach to Secure Multi-Tenancy

March 3, 2010
By

The Cisco-VMware-NetApp (CVN) was discussed on the Virtualization Security Podcast as it pertains to Secure Multi-Tenancy (SMT). This is a major concern that was also discussed at RSA Conference 2010 within the Cloud Security Alliance Summit. The question still remains how to achieve this goal however. CVN is a very good start, but as we…

Read more »

Featured Solutions