Virtualization will haunt customers, security experts 2008 onwards

We all know it. we are really not ready for security. C'mon, you should not be lying to yourself. You made the board happy by consolidating and saving your neck for a couple of years or months, depending your situation and the threat from your board.

Virtualization vendors are happy selling their stuff on the street and impressing their investors with some cool figures. System admins are happy to learn a new technology, they are just happy doing that, they've been waiting too long for some cool technologies. But now this technology has to be deployed in corporate world and serious applications like banking, insurance etc have to run on virtual platforms.

How do you combat security? What is/was their plan to ensure that the operations securely?

Telefici said that as information security improves, attackers' attention shifts to more vulnerable targets.

"After a pretty level playing field for some years, in 2007 we saw a big increase in social engineering to facilitate attacks, more precisely targeted attacks and more secretive attacks, as well as a change in motive from fame to fortune," he said.

Telefici said Microsoft had done a lot to improve the security of its products, but attackers are adapting their targets and methods to maintain their risk-reward ratio. Attackers were turning away from usual targets such as PayPal and eBay to smaller, less sophisticated targets that were easier to subvert.

"The criminals are driven by the risk-reward ratio," he said, "so these changes actually reflect the success of the industry in producing more effective products plus users' greater awareness of what not to do."

Link