so do the threats.
Assessment & Assurance- Business Impact & Risk Assessments
- Compliance & Regulatory Standards
- Penetration Testing
- Application Security
- Social Engineering Test
- Source Code Review
- Host Security Assessments
- Database Security
- Wireless Security
- Telecom Security
- PCI Compliance
- SCADA Security
- Virtualisation Security
- Mobility Security
- Incident Response
Virtualisation Security
In simple terms, virtualisation software allows you to run multiple operating systems on a single machine at the same time. Virtualisation technology is gaining popularity due to the benefits it offers in terms of reduced costs and increased operational efficiency and flexibility. However, this technology introduces a virtualisation layer that itself becomes a potential avenue of attack for the virtual services being hosted. Because a single host system can house multiple virtual machines, the security of that host becomes critical in maintaining the confidentiality, integrity and availability of your systems and data.
In our experience this immature technology is often poorly understood, and rarely implemented correctly in enterprise environments without jeopardising the organisations security posture. There are a number of security considerations which differ from the physical world, including but not limited to:
- network architecture
- zones of trust, network segmentation, and access control
- virtual switches and networking
- virtual appliances
- mobile servers
- patch application and management
- intrusion detection and prevention
- definition of roles and responsibilities
- storage
Presentations
Sense of Security has been invited to speak and presented on virtualisation security to the following forums:
- SCADA CoI - Virtualisation Security for Regulated Environments (IACS)
- AusCERT 2011: Virtualisation Security for Regulated Environments
- Australian Information Security Association (AISA) - 2008
- VMware Users group - 2009
- AusCERT2009 - Virtualisation: Pitfalls in Corporate VMware Implementations
- Australian Information Security Association (AISA) - 2010
- ISACA Oceania CACS2010 - Masters of Change Conference
- Securing Virtualised Environments - Focus on the Fundamentals. Webinar - 2010
- Webinar - Audio and Slides - Virtualisation Security; Focus on the Fundamentals
- Extract of Webinar - Video - How to Steal a Virtual Machine easily
- Presentation slide only
- Webinar - Audio and Slides - Virtualisation Security; Focus on the Fundamentals
- Virtualisation security for PCI environments - PCI DSS Conference - 2010
Take the Next Steps
Sense of Security are Australia's leading virtualisation security consultancy. We can show you how to implement virtualisation security effectively and realise the benefits.