Re: Standards? Whitepaper? RE: virtual machines

["Schoenefeld, Keith" <schoenk () ILLINOIS EDU>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Theresa,

This is far from specific to education, but here are the latest docs on
securing VMWare that I'm aware of:

http://communities.vmware.com/community/vmtn/general/security?view=documents

- -- KS

On 3/22/10 10:11 AM, Theresa Semmens wrote:
> Has anyone set up security standards or written a white paper on security
> for virtual machines?  It would make a nice case study for Educause and for
> those who will be attempting to set up virtual labs and servers.  You are
> welcome to share online or offline with me.
>
> Theresa Semmens, CISA
> Chief IT Security Officer
> North Dakota State University
> IACC 210D
> PO Box 6050
> Fargo, ND 58108
> Phone: 701-231-5870
> Fax: 701-231-8541
> Theresa.Semmens () ndsu edu
>
> "Opportunity is missed by most people because it is dressed in overalls and
> looks like work."  Thomas Edison
>
>
> -----Original Message-----
> From: The EDUCAUSE Security Constituent Group Listserv
> [mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Julian Y. Koh
> Sent: Monday, March 22, 2010 10:04 AM
> To: SECURITY () LISTSERV EDUCAUSE EDU
> Subject: Re: [SECURITY] virtual machines
>
> At 8:53 AM -0600 3/22/10, Ozzie Paez wrote:
> > I would be curious to know if anyone has actually encountered problems
> > with this issue,
>
> We have definitely had issues where VMs were compromised or otherwise
> causing problems.  As the OP said, part of it can be complicated depending
> on whether the VMs are running in bridged or NAT mode, but the ultimate end
> is that the port gets shut off, so either way the problem is cut off from
> the network.  Analysis then leads to figuring out exactly what happened.

- --
Keith Schoenefeld
Network Security Officer
Office of Privacy and Information Assurance
University of Illinois
(217) 333-4332
-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.12 (Darwin)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkunjroACgkQdQwgufanQJp+VgCglxrhgW7QN6cN9OZvdOm63/ZG
KJAAoI8JhItGlD3UY1PzlNZ5fZEBpWN7
=SZNW
-----END PGP SIGNATURE-----