Today, security is undoubtedly the biggest risk and negative side effect to cloud computing. Fortunately, the status quo is about to change. The Trusted Computing Group (TCG), a not-for-profit organization that has developed open standards for computers, networks, storage and mobile de...

Joe Menn explores the current cyber-crime landscape, the underground cyber-gang movement, and the motive behind governments collaborating with organized crime in cyber space. Maybe you can make your enterprise a little trickier to get into than the other guy’s enterprise, but crime pa...

We meet with OPSWAT’s CEO Benny Czarny to talk about the F5 partnership and Steven Gill, VP Engineering, gives us a demo of some of their new technologies. ps Resources: F5 YouTube Channel F5 Partner Page OPSWAT Technorati Tags: F5, RSA, Pete Silva, security, business, education, techn...

Researchers from North Carolina State University and IBM have developed a new way to prevent malware from being spread in cloud computing infrastructure through compromised hypervisors. HyperSentry is an "out of band" process that continually monitors the integrity of virtual machine ...

Looking ahead, the X-Force Research and Development team has identified some key trends to watch for in the future, including: Cloud Computing — As an emerging technology, security concerns remain a hurdle for organizations looking to adopt cloud computing. As organizations tran...

We are constantly bombarded with articles and presentations about the security risks in cloud computing and why organizations need to be concerned about them as they consider a move. The truth is that organizations DO need to be concerned about security – but they needn’t be paralyzed ...

A session by Terry Woloszyn, Founder/CTO of PerspecSys, addresses "data privacy, residency, and security in the cloud." The speaker notes, "Cloud solutions, especially Software-as-a-Service (SaaS), have questions regarding data security and governance arise. Depending on your jurisdict...

Charney explained that identity solutions that provide more secure and private access to both on-site and cloud applications are key to enabling a safer, more trusted enterprise and Internet. As part of that effort, Microsoft today released a community technology preview of the U-Prove...

Depending on how IT executives handle the situation, reactions to data loss reports can range from indignation to outrage, with personal consequences for the decision-makers. IT executives at ChoicePoint, Inc., looked like heroes when they reacted swiftly to a potential data breach in ...

According to the Trend Micro 2010 Future Threat Report, cloud computing and virtualization -- while offering significant benefits and cost-savings -- move servers outside the traditional security perimeter and expand the playing field for cybercriminals. The industry already witnessed ...

Through this partnership, Astadia will help its clients resolve SaaS Single Sign-On and other Internet Identity Security related issues. “Improving cloud application performance and value requires administrators to address process, directory, technology, and security issues,” said Mike...

Telepresence centers feature high-definition visual communications tools that range from personal units to life-size screens that sprawl the length of the room, with duplex and directional sound. The technology allows clients to hold virtual meetings with multiple locations at one time...

Tier1's Phil Shih get's it right (as usual): "...Yahoo is also set to unload Zimbra, which Yahoo has had little success leveraging across its small business customer base, although it continues to grow. T1R does not agree that Zimbra had (or has) no hope within Yahoo because it is a so...

I decided to build upon (or steal, however you see it) the idea with ‘26 Short Topics about Security.’ Yes, I’m a Simpsons fan (22 Short Films About Springfield) and got some inspiration. This blog series is actually an altered version of a presentation I did a few months back that I...

At last week’s SAN’s virtualization security summit some 120 security managers, newly tasked with protecting their expanding virtualization environments, were eager to learn how to establish control and achieve compliance. Whether the representatives came from the DOD and civilian a...

After pushing my latest post, Securing the Cloud: Shared Hardware and the Data Plane, Hoff posted a series of excellent questions and responses to the post via Twitter. I thought responding via another blog post, so that his questions could be addressed alongside my last post, was the ...

Server virtualization has moved well beyond the arena of early adopters and is an accepted solution to many of the challenges faced by IT organizations. However, desktop virtualization has not made the same inroads. Certainly, there have been some key uses for desktop virtualization, s...

Server virtualization will become a dominant factor in the next three to five years in an effort to reduce operating costs and simplify business. One highly popular trend is using virtualization for data center consolidation. Companies are consolidating everything from Web servers to t...

There are pitfalls in using software-based network interface cards and host bus adaptors. They don't scale well in I/O-centric loads running on scaled-out architectures. The CEO of a leading virtualization companies said, 'Software virtualization addresses 80% of the market and it leav...

Knowledge Consulting Group (KCG) announced a partnership with Catbird to provide the Virtual Infrastructure Security Assessment (VSA). Further expanding Catbird’s network of veteran security partners, KCG will deliver the Catbird VSA to help IT administrators identify and close potenti...

"Go forth and multiply" has a new interpretation in the IT world: "Go forth and virtualize." It is no surprise that enterprises today are adopting virtualization technologies in droves, not only because of the cost reduction and efficiency it delivers, but for the flexibility the techn...

Shavlik Technologies announced the availability of Shavlik NetChk Protect 6.5. Shavlik NetChk Protect 6.5 is a virtual machine management solution that provides continuous patch assessment and remediation of your complete virtual world, including Offline Virtual Images.

As organizations chart out their virtual architectures, security still remains an afterthought, putting these networks at unprecedented risk. Stonesoft is an innovative provider of integrated network security and resilient connectivity solutions that are architected to work within a vi...

Stonesoft announced that it plans to support VMware VMsafe technology. By using VMsafe technology, Stonesoft’s virtual StoneGate appliances can provide an even deeper level of visibility and manageability to ensure the security of virtual environments.

The discipline of systems management is composed largely of managing the computing endpoint. The 'endpoint' is traditionally a computer that takes the form of an application/process server or an end-user desktop/laptop. This definition doesn't cover all endpoint types or devices but do...

There's no question that advances in server virtualization technology are becoming popular among corporations that want to save money by consolidating resources and improving operational efficiency. Virtualization enables a dramatic increase in cost savings in ongoing maintenance and t...

Symantec announced it is delivering expanded endpoint virtualization solutions to further protect and manage endpoints, whether physical, virtual or hybrid. Symantec provides IT organizations the flexibility needed to deliver applications with a variety of computing models matched to t...

Fortisphere announced that international law firm Nixon Peabody has selected Fortisphere Virtual Essentials to more efficiently manage its virtual infrastructure. As one of the largest multi-practice law firms in the United States, Nixon Peabody has offices in 18 cities and employs mor...

Check Point announced VPN-1 Virtual Edition (VE), which delivers the same best-of-class security for virtual applications that Fortune 500 companies depend on to secure their corporate networks and data centers. Check Point is a company that provides unified security management for bot...

Cenzic announced the formation of the Cenzic Web Application Security Strategic Advisory Board. Industry notables Lloyd Hession, former chief security officer at British Telecom Radianz, John Mitchell, professor of computer science and electrical engineering at Stanford University, Dr....

Tripwire announced that Tripwire ConfigCheck has integrated VMware’s revised Virtual Infrastructure 3 Security Hardening Guide to assess VMware hypervisors for security and operational weaknesses created due to system misconfiguration. Tripwire ConfigCheck is a free utility that assess...

Currently most desktop productivity software including browsers, mail clients, Office suites, IM, and media players make direct connections to the Internet and/or run untrusted content. As a result, these applications, which are core to office productivity, are also the primary vector ...

NeoAccel announced the VMware version of its flagship product, SSL VPN-Plus. SSL VPN-Plus Gateway is a 3rd Generation VPN able to replace IPSec and to supersede conventional SSL VPNs which suffer from the TCP-over-TCP meltdown and degraded client-server application performance.

IdentiPHI announced its flagship enterprise security software product, SAFsolution 5, has been verified as Citrix Ready. The Citrix Ready program helps customers identify third-party solutions that add the greatest value in Citrix Application Delivery Infrastructure solutions. SAFsolut...

Secerno announced the availability of its Secerno.SQL database activity monitoring and blocking solution as a virtualized appliance on the VMware platform. This marks the availability of its appliance-based database protection in a virtualized environment, allowing enterprises the same...

SteelEye announced the general availability of SteelEye Protection Suite, a comprehensive solution that provides disaster protection of virtual machines running on Citrix XenServer. SteelEye Protection Suite delivers real-time LAN and WAN replication of XenServer virtual machines. It i...

TRANGO Virtual Processors announced that it has added support for the uITRON RTOS to the growing list of operating systems.hosted by the TRANGO Hypervisor. TRANGO's secure isolation, robust protection of critical data and services, and the company's steadfast commitment to providing th...

TRANGO Virtual Processors delivers isolation and portability of operating systems and drivers on the TI OMAP 3 platform. The TRANGO Hypervisor offers a broad choice of operating system (OS) and real-time operating system (RTOS) including Linux, Windows Embedded CE, Symbian OS, eCos, uC...

Reflex Security announced the availability of Reflex Virtual Security Center (VSC), pioneering a new level of security through heightened visibility and control for virtualized environments. Reflex VSC provides a single authoritative visual interface to secure the virtual data center. ...

Fortisphere announced that it plans to support VMware VMsafe technology, expanding the market reach of its Virtual Essentials software suite, which provides customers with greater levels of visibility and control over their VMware virtualized environments. VMware VMsafe technology help...