Skip to main content

Virtualization will haunt customers, security experts 2008 onwards

We all know it. we are really not ready for security. C'mon, you should not be lying to yourself. You made the board happy by consolidating and saving your neck for a couple of years or months, depending your situation and the threat from your board.

Virtualization vendors are happy selling their stuff on the street and impressing their investors with some cool figures. System admins are happy to learn a new technology, they are just happy doing that, they've been waiting too long for some cool technologies. But now this technology has to be deployed in corporate world and serious applications like banking, insurance etc have to run on virtual platforms.

How do you combat security? What is/was their plan to ensure that the operations securely?

Telefici said that as information security improves, attackers' attention shifts to more vulnerable targets.

"After a pretty level playing field for some years, in 2007 we saw a big increase in social engineering to facilitate attacks, more precisely targeted attacks and more secretive attacks, as well as a change in motive from fame to fortune," he said.

Telefici said Microsoft had done a lot to improve the security of its products, but attackers are adapting their targets and methods to maintain their risk-reward ratio. Attackers were turning away from usual targets such as PayPal and eBay to smaller, less sophisticated targets that were easier to subvert.

"The criminals are driven by the risk-reward ratio," he said, "so these changes actually reflect the success of the industry in producing more effective products plus users' greater awareness of what not to do."


Link

Comments

Popular posts from this blog

Security: VMware Workstation 6 vulnerability

vulnerable software: VMware Workstation 6.0 for Windows, possible some other VMware products as well type of vulnerability: DoS, potential privilege escalation I found a vulnerability in VMware Workstation 6.0 which allows an unprivileged user in the host OS to crash the system and potentially run arbitrary code with kernel privileges. The issue is in the vmstor-60 driver, which is supposed to mount VMware images within the host OS. When sending the IOCTL code FsSetVoleInformation with subcode FsSetFileInformation with a large buffer and underreporting its size to at max 1024 bytes, it will underrun and potentially execute arbitrary code. Security focus

Virtualization: GlassHouse hopes to cash in with its IPO!

GlassHouse Technologies Inc. on Tuesday registered to raise as much as $100 million in an initial public offering that, despite the company's financial losses, could prove a hit with investors drawn to its focus on "virtualization" technology. The Framingham, Mass., company offers consulting services for companies that use virtualization software to improve the performance of corporate servers and cut costs in their data centers. GlassHouse also provides Internet-based data storage. "Software-as-a-service," or SaaS, companies and vendors of virtualization products have proved popular among investors in recent years as corporate customers seek alternatives to conventional packaged software. GlassHouse, with roots in both sectors, will test the strength of that interest, said Peter Falvey, managing director with Boston investment bank Revolution Partners. "It will be a bit of a bell weather," he says. "It's not as though it's the 15th SaaS m...