Posted by
Christine Drake in
Cloud
Aug 28th, 2012 |
1 Comment
This year’s theme at VMworld is “Right here. Right now.” This call to action encourages participants to enter the new cloud era. Certainly there is room for this encouragement as many companies are yet to move to the cloud. In a recent 2012 Cloud Security Survey by Trend Micro, respondents provided the following implementation information for virtualization and cloud infrastructure actually in production:
Server Virtualization 43% (another 18% in pilot)
Virtual Desktop Infrastructure 35% (another 18% in pilot)
Private Clouds ...
Posted by
Christine Drake in
Cloud
Aug 28th, 2012 |
No Comments
Well, it depends. Let me step back and briefly explain agentless security to ground the conversation.
In virtual environments, many organizations have installed traditional agent-based physical endpoint security on each virtual machine (VM). But replicating the full solution on each VM saps host resources and degrades performance. An alternative is to integrate security with the virtualization platform. Providing a dedicated security virtual appliance on each host can use the virtualization platform APIs and hypervisor introspection to communicate with each guest VM without requiring in-guest...
Posted by
admin in
Deep Security, Malware, VMware
Aug 23rd, 2012 |
2 Comments
On August 21, widespread media reports began to circulate that a new virus or malware was attacking VMware virtual machines. “Crisis” (aka Morcut) is a new family of malware that began circulating in late July, and was reported by many anti-malware vendors, including Trend Micro, as principally infecting Mac OSX machines. Security researchers have recently uncovered that some new variants of Crisis also can infect VMware virtual machines and Windows Mobile devices.
Trend Micro is still researching all the potential implications–so any comments here are preliminary, but we do not believe...
Posted by
Christine Drake in
Cloud
Aug 15th, 2012 |
No Comments
We recently ran a poll on Linked In to get feedback on companies’ approaches to cloud data destruction. As of mid-August we had received 149 votes with the following results.
Over a fourth responded with “What’s that?” So let’s start with a brief explanation of cloud data destruction. In the cloud, your data is often moved to make the best use of resources. Cloud volumes are mobile. Snapshots are taken frequently, backups are made regularly, and information is shared across multiple data centers for cost savings and availability. The data might be moved by the data owner, or in cases...
Posted by
Dave Asprey in
Ambient Cloud, Cloud, Securing the Cloud
Aug 15th, 2012 |
No Comments
Previous: Ambient Cloud: What does it mean?
We know that the Ambient Cloud is a set of network connected devices that IT departments must manage. But, who is responsible for securing the Ambient Cloud?
If you are looking for help from your cloud provider, you might be disappointed. The fact is that you, the enterprise, are responsible for securing your cloud because you are responsible for what happens when cybercriminals breach your security. The good news is that now it’s safe to outsource specific security tasks to your cloud provider, as long as the roles and responsibilities are well defined...
Posted by
Tom Kellermann in
Cyber crime, Deep Security, Security
Aug 13th, 2012 |
No Comments
One of the oft-repeated themes in media reporting of cyber security events is that the “threat landscape is constantly evolving,” that attacks are becoming increasingly sophisticated and targeted and the men and women behind them are better resourced than ever before. Trend Micro research has found that over 90 percent of enterprise networks contain active, malicious malware with one new threat created every second. It’s certainly true, but begs for a deeper and more nuanced analysis.
How are these attacks getting more sophisticated?
How can a digital insider lay hidden, undetected within...
Posted by
Dave Asprey in
Ambient Cloud, Cloud
Aug 8th, 2012 |
No Comments
Cloud computing has meant managing servers or virtual machines or software as a service in a data center somewhere. IT executives have come to understand that provisioning on-demand IT software and infrastructure services via the internet provides huge benefits in efficiencies, cost savings and scalability. The rise of mobile devices more powerful than pcs from a few generations ago, combined with consumerization and the rise of a decentralized workforce has created what we now know as the Ambient Cloud.
Ambient Cloud is the set of network connected devices an IT department must manage.
Compared...
Posted by
JD Sherry in
Cloud, Security
Aug 2nd, 2012 |
No Comments
Although the recent legislation for the Cybersecurity Act of 2012 did not have enough support in congress to pass, the greater Washington DC area is making a clear statement that it wants to be the next Silicon Valley. The Federal government, its defense contractors and hardware/software manufactures from around the globe are forming alliances to build better castles and dungeons within the Clouds. This is to establish a new and improved protocol for protecting our national security interests and our deepest secrets from miscreants. The recruitment, education and mobilization of cyber forces...
