Standards? Whitepaper? RE: virtual machines

[Theresa Semmens <Theresa.Semmens () NDSU EDU>]

Has anyone set up security standards or written a white paper on security
for virtual machines?  It would make a nice case study for Educause and for
those who will be attempting to set up virtual labs and servers.  You are
welcome to share online or offline with me. 

Theresa Semmens, CISA
Chief IT Security Officer
North Dakota State University
IACC 210D
PO Box 6050
Fargo, ND 58108
Phone: 701-231-5870
Fax: 701-231-8541
Theresa.Semmens () ndsu edu

"Opportunity is missed by most people because it is dressed in overalls and
looks like work."  Thomas Edison 


-----Original Message-----
From: The EDUCAUSE Security Constituent Group Listserv
[mailto:SECURITY () LISTSERV EDUCAUSE EDU] On Behalf Of Julian Y. Koh
Sent: Monday, March 22, 2010 10:04 AM
To: SECURITY () LISTSERV EDUCAUSE EDU
Subject: Re: [SECURITY] virtual machines

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

At 8:53 AM -0600 3/22/10, Ozzie Paez wrote:
> I would be curious to know if anyone has actually encountered problems
> with this issue,

We have definitely had issues where VMs were compromised or otherwise
causing problems.  As the OP said, part of it can be complicated depending
on whether the VMs are running in bridged or NAT mode, but the ultimate end
is that the port gets shut off, so either way the problem is cut off from
the network.  Analysis then leads to figuring out exactly what happened.


-----BEGIN PGP SIGNATURE-----
Version: 9.9.1.287

wj8DBQFLp4bIDlQHnMkeAWMRAkxyAKDvv2iqNrMqTrqiR3zE02hQX8acJgCggkMq
D+IQEJE/BDIyzSFG8HwbyWE=
=GaOv
-----END PGP SIGNATURE-----

-- 
Julian Y. Koh                         <mailto:kohster () northwestern edu>
Manager, Network Transport                         <phone:847-467-5780>
Telecommunications and Network Services         Northwestern University
PGP Public Key:<http://bt.ittns.northwestern.edu/julian/pgppubkey.html>