or the lack thereof..

1. INUITS The real voyage of discovery consists in having new eyes . Marcel Proust

3. „ Infrastructure Architect“

4. Surviving the 10 th floor test

5. OSSTMM

6. Co-Author Virtualization with Xen

7. Guest Editor at Virtualization.com

9. What is VirtSec

10. Fud and Reality

11. VirtSec and Open Source

12. CloudSec

14. Isolate Operating system from the underlying hardware resources

15. Running multiple identical operating systems together on one machine

17. Saving Idle CPU Cycles

18. Separating Development/Staging/Production

19. Hardware independency

20. Security

21. Greener Environment

22. All the cool kids are doing it

24. Live Migration is not a HA Solution

25. Vendor Lock In

26. Heavy IO

27. Hardware dependencies & Live Migration

28. Security ?

30. Paravirtualization

31. VT Support

32. The core Virtual Infrastructure is open

33. Proprietary vendors try to catch up

34. And Build the Management FrameWorks

35. Virtualization to Me Xen KVM VirtualBox Linux Vserver OpenVZ Linux Containers LibVirt Convirt Qemu OpenQRM Enomaly UML

37. Securing the Guest OS in a Virtual Environment

38. Running Security tools in a Virtual Environment

39. Isn't VirtSec just a way for the security people to jump on the Virtualization Hype ?

47. What about Inter App traffic on the same host , only now we've isolated app from eachother

48. Bridging / Routing InterVM traffic rather than using proprietary sockets

50. My HA Clusters, are Active Passive, Active Active, or N+M too. Their state is in constant flux too

51. The role Config Management and Platform Automation grows every second.

53. But the problem is still growing

54. VM Relocation

55. Live VM Migration

56. Rapid ReDeployment

57. Multiple Instances of a service

59. A flying start

60. They save you time

61. They give you a nice preview of technology

63. Is the app secured

64. What about authentication integration ?

65. How to update it ?

66. They KILL your time

68. Did you patch before or after that one was copied ?

69. How do you patch 100 VM's ?

70. What about machines that are offline ?

71. Image Sprawl, your update nightmare The biggest challenges we have in virtualization are operational and organizational rather than technical. Christofer Hoff

73. Implement Configuration Management

75. Hypervisor Security

79. Not available in off the shelf Xen/OracleVM Go away or I will replace you with a small shellscript

81. Placing a Hypervisor under an OS

83. Ignorance vs Truth

85. Then exploit the VM vulnerability ?

89. data-center management platform

90. Not just your virtual platforms

91. provides generic virtualization layer

92. Deploy on demand

93. Support for physical , Xen, VMWare, Vserver, KVM

94. OpenQRM 4 is a full rewrite

95. Cloud Deployment

97. No Encryption

98. No handshake

99. Anyone who can spoof the openQRM server IP can reboot / redeploy your infrastructure

100. Being fixed

102. Written because there is a need

103. To scratch an itch

104. Peer review

105. Typically more secure than Proprietary

106. Leading Innovation in Virtualization

108. No Need for specialized projects / tools

111. No need for bloated hyped tools

112. Is VirtSec a market? It's an instantiation of technology, practice and operational adjustment brought forth as a derivative of a disruptive technology and prevailing market conditions. Does that mean it's a feature as opposed to a market? No. In my opinion, it's an evolution of an existing market, rife with existing solutions and punctuated by emerging ones. The next stop is how "security" will evolve from VirtSec to CloudSec... Christofer Hoff

113. Isn't CloudSec just a way for the security people to jump on the Cloud Hype ?

114. The Cloud ? Cloud computing refers to the use of Internet ("cloud") based computer technology for a variety of services. It is a style of computing in which dynamically scalable and often virtualised resources are provided as a service over the Internet. The concept incorporates software as a service (SaaS), Web 2.0 and other recent, well-known technology trends, in which the common theme is reliance on the Internet for satisfying the computing needs of the users.

115. SAAS <(>) Cloud

119. But do you TRUST him ?

124. Encrypt all inter Vhost traffic

125. FireWall as Never before

127. Workload offload

130. Scale Changes

131. Automation matters

132. Complexity is the Enemy of Reliability

134. Security still isn't a product you can buy It's not even a process It's a lifestyle

135. ` Kris Buytaert < [email_address] > Further Reading http://www.krisbuytaert.be/blog/ http://www.inuits.be/ http://www.virtualization.com/ http://www.oreillygmt.com/ ? !