Virtualization Security

Virtualization Security focuses upon end-to-end security, integrity, auditability, and regulatory compliance for virtualization and clouds.

Most Recently added Virtualization Security Resources: (See More...)

DevOps and Security

June 10, 2013
By
VirtualizationSecurity

I recently read the book Project Phoenix by Gene Kim, Kevin Behr, and George Spafford. If you are in development, IT, and Security it should be #1 on your reading list. In this book the authors discuss all the horrors we hear about in IT with a clear direction on how to fix them. There…

Read more »

Delegate User Problem and Proxies

May 30, 2013
By
VirtualizationSecurity

By far, the lowest hanging fruit of virtualization and cloud environment security is the segregation of your management control from your workloads. Separation of data and control planes have been recommended for everything from storage (EMC ViPR) up to the workloads running within virtual machines. The same holds true for cloud and virtual environment management…

Read more »

Internet of Things: Expectation of Privacy

May 15, 2013
By
VirtualizationSecurity

For years we have had an expectation of privacy while using our computers, tablets, phones, email, etc. However, with the advent of big data analysis and everything being on the internet, the internet of things, there is no longer the veil that makes up an Expectation of Privacy.

Read more »

News: Splunk App for Enterprise Security Updated

May 3, 2013
By
Splunk100x30

Splunk is well known for analyzing data in large volumes either within a local Splunk installation or within the Splunk Storm their cloud service. However, there has been a general lack of security related capability within both these tools. Yes they can correlate some security data, but requires a bit of hands on work to…

Read more »

Cyber Defense: Using Virtual Desktops?

April 29, 2013
By
DesktopVirtualization

There was recently a rather heated twitter discussion between @Guisebule, @VirtualTal, and @Texiwill (myself) about using virtual desktops as a part of cyber defense. While this could be true, there is a need to ensure you know where your virtual desktop(s) start and end, not only within the network, but your applications in use. In…

Read more »

How Will VMware Win Against Microsoft?

April 26, 2013
By
DataCenterVirtualization

A VMware win against Microsoft simply requires VMware to turn the pricing tables on Microsoft, and to leverage its highly differentiating functionality in its Software Defined Data Center strategy. VMware could re-establish technical dominance in the data center virtualization space as early as the end of this year by leveraging its software defined networking, software…

Read more »

Virtual Desktop Patching and Data Protection

April 23, 2013
By
DesktopVirtualization

Data Protection and patch management of virtual desktops, while not a sexy topic, is one that should happen on a regular basis within any organization implementing or working to implement virtual desktops. Recently, we have been testing virtual desktop software and there is a huge difference between patching and protecting data in a small number…

Read more »

Cloud Tenant PCI-DSS Dilemma

April 17, 2013
By
VirtualizationSecurity

There is a dilemma for all tenants of a public or private cloud: Scope. For the tenant, they want everything to be in scope. For the Cloud Service Provider (CSP) they want to limit scope to the bare minimum. What does it mean for a Cloud to be 'PCI Compliant' and why is this a…

Read more »

How VirtuStream does Cloud Security

April 11, 2013
By
Virtustream100x30

On the 4/4 Virtualization Security Podcast, Pete Nicoletti, the chief information security officer for Virtustream, joined us to discuss how VirtuStream does cloud security. VirtuStream runs some of, if not the largest SAP installations in the cloud for very large enterprises around the world. The key to VirtuStream is that they are an Enterprise Cloud…

Read more »

Featured Solutions