Home > Surveys Raise Doubts on Virtualization Security

News

Surveys Raise Doubts on Virtualization Security

10/10/2008

Migration to virtualization won't be the quick transition that some technology evangelists have predicted, according to recent surveys by two IT security companies. Nor is virtualization as secure as many might want it to be.

Virtualization security appeared to be a doubtful matter for nearly half of respondents in a survey released on Monday by San Francisco-based network security firm nCircle Inc.

In that survey, 47 percent of the study's more than 200 respondents said they didn't think the security methodologies around current virtualization programs were sound at all. Another seven percent of respondents ranked virtualization security in the "maybe/ depends" category.

"Security professionals are generally and rightfully always somewhat skeptical about new technologies," said nCircle's Director of Security Operations Andrew Storms. "I think seasoned veterans understand that technology can be both an enabler and a hindrance to solving any problem, security not excluded. How, when, where and why technologies are introduced to solve a problem is what matters most."

The jury is still out on virtualization security, which accounts for the split results found in nCircle's poll, Storms said.

The need for virtualization is clear. It's easier to roll out a new virtual guest system than it is to go into a room and push out a physical server. Moreover, a second survey, published this week by St. Paul, Minn.-based Shavlik Technologies, found that virtual machines are quickly becoming a fixture in many organizations.

Shavlik's survey polled VMworld 2008 conference attendees in a sample of nearly 300 IT, virtualization and security specialists. The survey found that security lagged despite virtualization rollouts. More than 80 percent of IT managers rated securing these virtual machines as "very important to critical," but only 35 percent had actually secured them, Shavlik's study found.

"Companies recognize the benefits of virtualization but are slower at implementing the security measures needed to protect their available information assets," said Chris Schwartzbauer, Shavlik's vice president of worldwide field operations.

While that's a problem now, virtualization offers some benefits.

"Increased investment in automating and simplifying the elements of securing virtual machines represents a significant challenge, but also an opportunity for companies to increase operational efficiencies and reduce the total cost of managing the security of virtual systems," Schwartzbauer explained.

Virtualization marks a shift in thinking, as described in a landmark speech by VMware's President and CEO Paul Maritz. He said the IT infrastructure should be treated as "a single giant computer on which applications can be provisioned in a more manageable, scalable way."



Recommended Reading
  • UNLV Hospitality Students Learn on Micros Opera

    The William F. Harrah College of Hotel Administration at the University of Nevada, Las Vegas (UNLV) has received a donation from Micros Systems that will allow the college's students to use its Opera hospitality software in classes.

  • Cambridge Reduces Support Needs in Move to New Wireless System

    The University of Cambridge is deploying Aruba Networks' wireless LAN equipment to replace a legacy network that had become unmanageable and a drain on resources. Since early 2008, about 100 Aruba AP-65 access points have been deployed, along with dual MMC-6000 Multi-Service Mobility Controllers.

  • iKnow Social Learning Platform Expands Language Support

    Cerego has released new content creation tools for its iKnow social learning platform, adding support for creating learning modules in any of 188 languages. The company has also expanded language support for the text-to-speech technology used in the iKnow platform.

  • Smart Debuts Updated Whiteboard Lineup

    Smart Technologies last week unveiled updates to its Smart Board 600i interactive whiteboard system. The new lineup includes both a standard 4:3 and a widescreen 16:10 model, each featuring new boom-mounted, short-throw projectors.

  • SUNY's Binghamton Monitors Network with Lancope's StealthWatch

    Binghamton University, part of the State University of New York (SUNY) system, is using StealthWatch from Lancope to help streamline network management, control, and security with visibility of network behavior. Binghamton has an IT network that spans 20,000 client endpoints and six geographic locations. After contending with worm propagation and other security threats that affected network performance, the university's network management team sought a way to increase visibility of network traffic and analyze network behavior for potential threats.

  • Tufts Grants Rights for Mileage-Increasing Transportation Technology to Electric Truck

    Tufts University has optioned rights to a technology that can recharge the batteries of any hybrid electric and electric-powered vehicle while it is driven. The Tufts-developed technology could increase by 20 percent to 70 percent the miles per gallon or total driving range performance of vehicles like the Honda Civic, Ford Escape, and Toyota Prius hybrids and the Tesla Motors and Phoenix Motorcars electric vehicles.