SecurityRatty: Black Hat Bloggers Network topic of interest

This is cache of http://feeds.feedburner.com/~r/StillsecureAfterAllTheseYears/~3/314348599/black-hat-blo-1.html. Cache is the snapshot of article that we took when we index feed.
To see original page click here.
We are not affiliated with the authors of this article and not responsible for its content.

Black Hat Bloggers Network topic of interest

2008-06-18 00:11:19 by HASH0x8b63a14 in StillSecure, After All These Years

Blackhatbloggers This post is intended to member of the Black Hat Bloggers Network and others who blog on security. When we announced our affiliation with the Black Hat folks, we said that between now and the show in August we would pick topics of interest tied to presentations at Black Hat for us to "shine a light on". With over 150 blogs in the network, if even a small percentage of us write on one particular topic that should be quite a concentration. I am looking forward to see the many different tangents our members will take these topics.

Our first topic comes to us from an SBN member who will be presenting at Black Hat. It is one of our resident big brains, Chris Hoff talking about virtualization and security. I asked Chris to give me a quick write up on what he is presenting and here it is:

Despite shiny new stickers on the boxes of our favorite security vendors' products that advertise "virtualization ready!" or the hordes of new startups emerging from stealth decrying the second coming of security, there exists the gritty failed reality of attempting to replicate complex network and security topologies in virtualized environments.

This talk will clearly demonstrate that unless we radically rethink our approach, the virtualization security apocalypse is nigh!

We will focus on both securing virtualization as well as virtualizing security; from virtualization-enabled chipsets to the hypervisor to the VM's, we'll explore the real issues that exist today as well as those that are coming that aren't being discussed or planned for:

Some security things you do today are perfectly reasonable and work well in virtualized environments, others simply don’t work at all
Virtualized Security can seriously impact performance, resiliency and scalability
Replicating many highly-available security applications and network topologies in virtual switches don’t work
Monolithic security vendor virtual appliances are the virtualization version of the UTM argument
Virtualizing security will not save you money, it will cost you more

You can read more on this at Chris's blog here. So bloggers here is the deal. You have what Hoff thinks, what do you think. Wrap your heads around virtualization and security and lets hear what you have to say. We will all be reading! ON YOUR MARK, GET SET, BLOG!