the State of Security

virtualization

Reflections on the PCI DSS for Virtualization Guidelines and Father’s Day

by Bret Lenmark

My father was a small business man.  At 6’2” and 250 lbs., he was a large small business man.  After learning the ropes of North American retail business at Sears for 13 years, he opened up a (literally speaking) Mom and Pop appliance store serving a rural community, where he thrived by nature of his [...]

Read More

RSA 2010: Chris Hoff on the state of data in a virtualized environment

by David Spark

David Spark here reporting for Tripwire at the 2010 RSA Conference in San Francisco. Mr. Cloud, aka @beaker on Twitter, and one hell of a smart and nice guy, Chris Hoff, Director of Cloud and Virtualization Solutions for Cisco Systems, chatted with me about the state of data in a virtualization space. When I asked [...]

Read More

RSA 2010: How do you secure 14,000 virtual machines on 512 servers?

by David Spark

David Spark here reporting for Tripwire at the 2010 RSA Conference in San Francisco. Edward Haletky (@texiwill) is a virtualization security analyst and author. And as Haletky points out, security in the virtualization space requires a whole new way of thinking about security. Last year at the VMWorld conference, they had 14,000 machines on 15 [...]

Read More

Clouds and Snake Oil

by Dwayne Melancon

At the VMworld conference a couple of weeks ago, I was talking to several customers who are being approached by people who purport to offer magical cloud services that (at least according to the vendors) make life effortless, compliant, secure, and error-free. This is a recurring problem in IT: some hot topic emerges, and lots [...]

Read More

Trust doesn’t come easy

by Dwayne Melancon

I’ve been speaking with a number of virtualization pros lately and a couple of recurring threads have popped out of the discussion: Many virtualization admins are concerned about reputation (their own and the reputation of virtualization as a platform) within their companies; These same admins are often the “go-to guy” around virtual infrastructure and haven’t [...]

Read More

Shapes in the Clouds

by Dwayne Melancon

Just reading up on the emergence of the Cloud Security Alliance, courtesy of Chris Hoff’s blog. The Cloud Security Alliance (CSA) seems like a good move. According to Hoff, it’s not a secret star chamber-like cabal of illuminati figurehead organization: “It’s a good mix of vendors, practitioners and interested parties who are concerned with framing [...]

Read More