NEW YORK, Feb. 6 /PRNewswire/ -- Enterprises can save money and reduce overhead using server virtualization and the use of so-called "virtual machines." Unfortunately, they may also be opening themselves to some security risks that aren't self-evident, says Joshua Corman, Principal Security Strategist for IBM Internet Security Systems, in a video tutorial posted today on the Internet Evolution Website (http://www.internetevolution.com/tutorial_virtualizationsecurity.asp).
Server virtualization, where multiple operating systems and/or applications are handled by a single server (or a dynamic patchwork of servers), has helped enterprises reduce energy usage and management personnel. But as Corman describes in the tutorial, virtualization can be compared to putting all the eggs in one basket. "We used to have isolation - we had a single server running a single set of mission-critical applications," he explains. "Now, as enterprises begin to collocate these for greater efficiencies, we introduce more risk."
Corman explains the organizational and technical implications for security management, such as what happens when virtualization's "live migration" function gets activated, or what could occur when a suspended or frozen OS "instance" gets reactivated without proper patching. Policies and best practices are crucial in an era when software vulnerabilities are rampant, Corman explains in the tutorial series, and could provoke the ire of auditors and regulators for compliance infractions.
Server virtualization is either in use or being considered in data centers of all sizes, and the security implications shouldn't be overlooked, according to Internet Evolution Editor in Chief Terry Sweeney.
"Virtualization, VMs, and hypervisors are in wide use, and the technology is still new enough that most enterprise customers haven't completely thought through how it affects security management," Sweeney says. "Corman breaks down a complex issue into 12 digestible pieces, with prescriptions for avoiding common pitfalls, and some previews of coming attractions that will make virtualization even more secure in the future."
To view the virtualization security video tutorial on Internet Evolution click here: http://www.internetevolution.com/tutorial_virtualizationsecurity.asp
About Light Reading
Founded in 2000, Light Reading (http://www.lightreading.com/) is the leading online media, research, and focused event company serving the $3 trillion worldwide communications market. Lightreading.com is the ultimate source for technology and financial analysis of the communications industry, leading the media sector in terms of traffic, content, and reputation. Light Reading's research arms, Heavy Reading and Pyramid Research, provide the most comprehensive communications research, market data, and technology analysis in close to 100 markets around the world. Light Reading produces nearly 20 targeted communications events including TelcoTV, Ethernet Expo New York and Ethernet Expo London, The Tower Summit @ CTIA, and Optical Expo, as well as focused one-day events tailored for cable, mobile, and wireline executives. Light Reading was acquired by United Business Media in August 2005 and operates as a unit of TechWeb.
About TechWeb
TechWeb (http://techweb.com/aboutus), the global leader in business technology media, is an innovative business focused on serving the needs of technology decision-makers and marketers worldwide. TechWeb produces the most respected and consumed media brands in the business technology market. Today, more than 13.3 million* business technology professionals actively engage in our communities created around our global face-to-face events, Interop, Web 2.0, Black Hat, and VoiceCon; online resources such as the TechWeb Network, Light Reading, Intelligent Enterprise, InformationWeek.com, bMighty.com, and The Financial Technology Network; and the market leading, award-winning InformationWeek, TechNet Magazine, MSDN Magazine, and Wall Street & Technology magazines. TechWeb also provides end-to-end services including next-generation performance marketing, integrated media, research, and analyst services. TechWeb is a division of United Business Media, a global provider of news distribution and specialist information services with a market capitalization of more than $2.5 billion.
*13.3 million business decision-makers: based on number of monthly connections
About United Business Media Limited (http://www.unitedbusinessmedia.com/)
United Business Media Limited (UBM) is a global media and marketing services company that informs markets and brings the world's buyers and sellers together at events, online, in print, and with the information they need to do business successfully. UBM serves professional and commercial communities, from IT professionals to doctors, from journalists to jewelry dealers, from farmers to pharmacists around the world. UBM employs more than 6,500 people in more than 30 countries. UBM's businesses operating in the US include CMPMedica, Commonwealth Business Media, Everything Channel, PR Newswire, RISI, TechInsights, TechWeb and Think Services. UBM is listed on the London Stock Exchange (UBM.L) and has a market capitalization of $2.5 billion.
Contact
Amy Averbook
TechWeb's Internet Evolution
(212) 925-0020 x112