Find White Papers
Home
About Us
List Your Papers
    
> Blue Lane > Virtualization Security Playbook

Virtualization Security Playbook

White Paper Published By: Blue Lane

Virtualization has become all the rage for companies interested in optimizing their servers and storage systems. This shift in data center architecture allows IT organizations to reduce operational costs and increase flexibility and responsiveness to changing business demands. But in this rush to virtualize, security can fall by the wayside.



Tags : 
virtualshield, virtual shield, virtualization, security, network security, vmware, vm ware, bluelane

Blue Lane
Published:  Aug 31, 2007
Type:  White Paper
Length:  16 pages

CMP
Virtualization Security
Playbook
IntroductionStrategies for Delivering Securing Your VirtualizedDynamic Security for Data CenterFritz NelsonVirtual Data Centers 2 CMP Technology
FAe aCtoumrep Aerntidclieusm of Recent Articles by CMP Editors
Network Computing InformationWeekGartner: Virtualization Can Virtualization's NextWeaken Security Frontier: SecurityKelly Jackson Higgins . . . . . . . . . . . . . .3 Larry Greenemeier . . . . . . . . . . . . . . . . 8A Look at Blue Lane Fighting Security Ghosts inVirtualShield the Virtual MachineAvi Baumstein . . . . . . . . . . . . . . . . . .12 Larry Greenemeier . . . . . . . . . . . . . . 10
Dark Reading
VMs Create Potential RisksKelly Jackson Higgins . . . . . . . . . . . . . .4New Tool: Virtual Tip ofthe IcebergKelly Jackson Higgins . . . . . . . . . . . . . .6
From the editors of:
Sponsored by:BACK TO HOME
Securing Your Virtualized Data Center
Virtualization has become all the rage for companies interested in optimizing theirservers and storage systems. This shift in data center architecture allows IT organiza-tions to reduce operational costs and increase flexibility and responsiveness to chang-ing business demands.
But in this rush to virtualize, security can fall by the wayside. And this lack of security islikely preventing many enterprises from experiencing the full benefits of this major net-work transformation.
Organizations must be mindful that virtual servers require different security measures.Traditional, static security measures such as firewalls, VLANs and other specialized secu-rity appliances simply don't make the grade in this new world of virtualization, soenterprises have to seek out alternatives if they want to create the next generation datacenter.
Instead of rigid security walls, virtualized server environments need flexible virtualshields. Shields are dynamic. Shields can move with the servers they protect, so theycan be brought quickly to the point of attack. And shields can be orchestrated on-demand by a management system.
To get a third-party perspective on the topic, Network Computing provides "Gartner:From the Virtualization Can Weaken Security," which presents research that suggest that virtualeditors of: servers will be less secure than physical servers through 2009.
According to the Dark Reading article "VMs Create Potential Risks," there's no guaran-tee that your security policies from physical servers will carry over to your virtual ones.The article looks closely at several of the biggest security risks and how to mitigate thethreats to your systems. InformationWeek's article "Virtualization's Next Frontier:Security" elaborates on the pros and cons of virtualization security and some of thesolutions currently on the market.
All of this may sound grim for enterprise IT departments, but there is a bright side. Anumber of vendors are addressing exactly this issue of security for virtual resources. Aswe see in Network Computing's in-depth review, "A Look at Blue Lane VirtualShield,"there are products on the market that will eliminate malicious content from networktraffic before it hits your virtual servers.
As you transition to a virtualized environment, turn to the Virtualization SecurityPlaybook, brought to you by CMP Technology, AMD and Blue Lane, as your go-toresource for all the latest information about securing your most valuable IT assetsagainst increasingly aggressive attacks.
Fritz NelsonSenior Vice PresidentCMP Integrated Marketing Solutions
2 SECURE VIRTUALIZATION PLAYBOOKBACK TO HOME networkcomputing.com, April 5, 2007
Gartner: Virtualization Can
Weaken Security
Research firms says companies that adopt virtualization without having best prac-tices in place run the risk of jeopardizing enterprise security
April 5, 2007By Amy Larsen DeCarlo
Gartner will present research later this month that caution as they deploy VMs. The research firm suggests that companies that hurry to implement suggested that too many businesses try to take thevirtualization technology without first implementing same approach to securing their virtual servers thatbest practices for security may be in for trouble. they use to protect physical servers. This leavesVMs exposed to threats.The analyst firm said the combination of immaturesecurity tools for virtualized environments and t... [download for more]

Browse Technology Topics

Data Center

Virtualization, Cloud Computing, Infrastructure, Design and Facilities, Power and Cooling, Green Computing  
    

Data Management

Application Integration, Analytical Applications, Business Intelligence, Configuration Management, Database Development, Data Integration, Data Mining, Data Protection, Data Quality, Data Replication, Database Security, EDI, SOAP, Service Oriented Architecture, Web Service Management, Data Warehousing  
    

Enterprise Applications

Application Integration, Application Performance Management, Best Practices, Business Activity Monitoring, Business Analytics, Business Integration, Business Intelligence, Business Management, Business Metrics, Business Process Automation, Business Process Management, Call Center Management, Call Center Software, Change Management, Corporate Governance, Customer Interaction Service, Customer Relationship Management, Customer Satisfaction, Customer Service, EBusiness, Enterprise Resource Planning, Enterprise Software, EProcurement, Extranets, Groupware Workflow, HIPAA Compliance, IP Faxing, IT Spending, Marketing Automation, Performance Testing, Product Lifecycle Management, Project Management, Return On Investment, Risk Management, Sales & Marketing Software, Sales Automation, Server Virtualization, Simulation Software, Supply Chain Management, System Management Software, Total Cost of Ownership, Video Conferencing, Voice Recognition, Voice Over IP, Workforce Management, Incentive Compensation, Spend Management, Manufacturing Execution Systems, International Computing  

Human Resource Technology

Human Resources Services, Payroll Software, Time and Attendance Software, Workforce Management Software, Financial Management, Employee Monitoring Software, Employee Training Software, Recruiting Software/Services, Employee Performance Management, ELearning, Benefits Management, Expense Management  
    

IT Career Advancement

Cisco Certification, Microsoft Certification, Linux Certification, Network Security Certification, Software Development Certification  

IT Management

Employee Performance, ITIL, Productivity, Project Management, Software Compliance, Sarbanes Oxley Compliance, Service Management, Desktop Management  
    

Knowledge Management

Collaboration, Collaborative Commerce, Contact Management, Content Delivery, Content Integration, Content Management System, Corporate Portals, Customer Experience Management, Document Management, Information Management, Intranets, Messaging, Records Management, Search And Retrieval, Search Engines, Secure Content Management, SLA  

Networking

Active Directory, Bandwidth Management, Convergence, Distributed Computing, Ethernet Networking, Fibre Channel, Gigabit Networking, Governance, Grid Computing, Infrastructure, Internetworking Hardware, Interoperability, IP Networks, IP Telephony, Local Area Networking, Load Balancing, Migration, Monitoring, Network Architecture, Network Management, Network Performance, Network Performance Management, Network Provisioning, Network Security, OLAP, Optical Networking, Quality Of Service, Remote Access, Remote Network Management, Server Hardware, Servers, Small Business Networks, TCP/IP Protocol, Test And Measurement, Traffic Management, Tunneling, Utility Computing, VPN, Wide Area Networks, Green Computing, Cloud Computing, Power and Cooling, Data Center Design and Management, Colocation and Web Hosting  
    

Platforms

AS/400, Domino, Linux, Microsoft Exchange, Oracle, PeopleSoft, SAP, Siebel, Solaris, Tivoli, Unix, Web Sphere, Windows, Windows Server  

Security

Access Control, Anti Spam, Anti Spyware, Anti Virus, Application Security, Auditing, Authentication, Biometrics, Business Continuity, Compliance, DDoS, Disaster Recovery, Email Security, Encryption, Firewalls, Hacker Detection, High Availability, Identity Management, Internet Security, Intrusion Detection, Intrusion Prevention, IPSec, Network Security Appliance, Password Management, Patch Management, Phishing, PKI, Policy Based Management, Security Management, Security Policies, Single Sign On, SSL, Secure Instant Messaging, Web Service Security, PCI Compliance, Vulnerability Management  
    

Software Development

.NET, C++, Database Development, Java, Middleware, Open Source, Software Outsourcing, Quality Assurance, Scripting, SOAP, Software Testing, Visual Basic, Web Development, Web Services, Web Service Security, XML  

Storage

Backup And Recovery, Blade Servers, Clustering, IP Storage, ISCSI, Network Attached Storage, RAID, Storage Area Networks, Storage Management, Storage Virtualization, Email Archiving, Data Deduplication  
    

Wireless

802.11, Bluetooth, CDMA, GPS, Mobile Computing, Mobile Data Systems, Mobile Workers, PDA, RFID, Smart Phones, WiFi, Wireless Application Software, Wireless Communications, Wireless Hardware, Wireless Infrastructure, Wireless Messaging, Wireless Phones, Wireless Security, Wireless Service Providers, WLAN  
Search