Excerpt:
Virtual servers are prone to the same attacks that plague servers, as well as to new threats that exploit weaknesses in hypervisor technology.
Server virtualization makes it possible to run multiple applications and operating systems on fewer hardware resources based on demand.
There are four top concerns about securing virtual environments:
- Virtual-machine escapes could propagate security problems: IT managers worry that security attacks design to exploit a hypervisor could infect virtual machines that reside on the same physical host, in what is known as a 'virtual-machine escape'.
- Virtual machines multiply patching burdens: The threat of virtual-server sprawl- a scenario in which the ease of deploying virtual machines results in more instances than planned- makes staying on top of patches and updates for operating systems critical in a virtual environment.
- Running virtual machines in the DMZ: Many IT manager avoid putting virtual servers in the DMZ, and other IT managers won't run mission-critical application on virtual machines in the DMZ or even on those machines protected by corporate firewalls.
- The newness of hypervisor technology could be an invitation to hackers: Industry watchers advice security managers to remain a bit skeptical about virtual operating systems and their potential to introduce more hold and vulnerabilities than they can patch manually.
|
