Las Vegas, May 22nd 2007: Virtualization and Security Panel

BlueLane folks are spending a lot of time and energy talking about Virtualization.

For years, virtualization was relegated to development and test environments. IT organizations were wary of this new technology in their production environments. Recently, migration to production has been accelerating, but is this because there is now less reason to be wary? Quite to the contrary, the transient nature of Virtual Machines introduces new security and compliance challenges not addressed by traditional systems management processes and tools. Organizations that aren't dealing with those challenges head-on are in for some headline grabbing surprises. This panel of leading experts on virtualization and security will discuss the security risks inherent in virtualized environments and what can be done to mitigate them.

Check the full Virtualization agenda!

Comments

Security: VMware Workstation 6 vulnerability

vulnerable software: VMware Workstation 6.0 for Windows, possible some other VMware products as well type of vulnerability: DoS, potential privilege escalation I found a vulnerability in VMware Workstation 6.0 which allows an unprivileged user in the host OS to crash the system and potentially run arbitrary code with kernel privileges. The issue is in the vmstor-60 driver, which is supposed to mount VMware images within the host OS. When sending the IOCTL code FsSetVoleInformation with subcode FsSetFileInformation with a large buffer and underreporting its size to at max 1024 bytes, it will underrun and potentially execute arbitrary code. Security focus

What is Citrix announcing on Sept 15th?

I just did a NDA session with Citrix and was told of some really cool stuff that Citrix will be announcing. Obviously I am not at a liberty to reveal it yet but you can already start guessing. As a hint, you know where my focus is right now ;-)

Linux, Linux : Get started with VMWare and Knoppix or Ubuntu Live CD!

Well everyone's talking about it now and you're wondering "what the heck is Linux?". So you've finally come face to face with yourself and say it loudly(errum..In your head first , please). I want to learn it! I admit it, I've been a fool! I hafta learn this kool OS! OK chill! You're faced with a challenge of all that installation crap. And boy, ask the veterans they've made lot's of money just installing Linux and installing Oracle on Linux was a big thing. And talking about setting about clusters was only for Big Boys and doing Oracle RAC setup was only for BEEEG BOYZ!!! Ok I can see you're already sleeping on my story. And Hey! Stop drooling on my shoulder! Wake up!!! You yell back at me " WHAT DO I HAFTA DO? WHERE I GOTTA KLIK? I Don't wanna fight with my wife over installing Linux at home? And my Microsoft Boss is angry because I made my colleagues so scared when I installed Linux at work? Ok Ok I get it. You want to learn it'...

BlueLane folks are spending a lot of time and energy talking about Virtualization.

For years, virtualization was relegated to development and test environments. IT organizations were wary of this new technology in their production environments. Recently, migration to production has been accelerating, but is this because there is now less reason to be wary? Quite to the contrary, the transient nature of Virtual Machines introduces new security and compliance challenges not addressed by traditional systems management processes and tools. Organizations that aren't dealing with those challenges head-on are in for some headline grabbing surprises. This panel of leading experts on virtualization and security will discuss the security risks inherent in virtualized environments and what can be done to mitigate them.

Check the full Virtualization agenda!

Avastu Blog: Sustainable Global Clouds

Search This Blog