Showing posts with label Security. Show all posts
Showing posts with label Security. Show all posts

Tuesday, August 30, 2011

Virtualization Thrives, Security Struggles to maintain



Tall fences make good neighbors. That is true of life in suburbia and, apparently, on the interior of computers.

The profile of virtualization keeps growing and, with the wine, essential virtualized security. Reasonable the fact that will probably be major problem. It truly is unattainable something for free: Virtualization squeezes multiple os's onto one single physical machine. That saves space and overhead - nutrients, certainly - and also produces the likelihood of a condition impacting a much better proportion of the style the company is coming along.

This week, VMware patched a significant vulnerability found by Core Security. The drawback, consistent with an SC Security report, is very much a great one: Inside of a properly maintained machine, resident virtualized systems (guests) can transfer data to non-virtualized host systems. In scenarios using shared folders, the vulnerability enables hackers go from for a guest to taking full handle of the host machine. The versions of VMware impacted are Workstation 6. 0. 2 and earlier; VMware Workstation 5. 5. 4 and earlier; VMware Player 2. 0. 2 and earlier; VMware Player 1. 0. 4 and earlier; VMware ACE 2. 0. 2 and earlier and VMware ACE 1. 0. 2 and earlier.

A recent eCommerce Times piece on virtualized safety measures an important part of a set on every of virtualization. It comes down to the interesting observation men and women are usually not even positive that virtualization seems secure than other types of computing. An obvious upside is this : hackers can't be as certain of the dwelling belonging to the virtualized environment as they are able of traditional environments. Able traps can thwart exploits.

The group saying virtualization is less secure point out vulnerabilities into the hypervisor, application that manages operations. They mentioned going without shoes acts as magnets for that criminals. The piece concludes by suggesting that virtual security costs much cheaper than than traditional security.

This Network World piece starts by suggesting that few companies are focusing on security concerns as virtualization quickly proliferates. The author says the fact that nature of virtualization means legacy security approaches are inadequate. And ofcourse that software is often free of the confines of merely one computer itself, but it really won't go anywhere - safely, at a minimum - without security software which can use it. The piece then describes VMware's VMsafe as the first virtualized security procedure that uses a questionnaire programming interface (API) to deeply connect to the hypervisor.

.

Friday, August 26, 2011

Virtual Machines - Rapid Security Tool Deployment



Virtual Machines - Plenty of you've probably got word of them,

and/or even used them. Particularly those who might possibly have not,

here may be a brief description.

Virtual Machines, or OS Virtualization, allows heterogeneous

operating systems to own simultaneously on the same physical

hardware. Inside of a basic form, imagine running Or windows 7,

Windows 2003 Enterprise Server, and Linux on the same

computer also. Each virtualized operating

system, or environment, has the ways to access disk drives, memory,

video, input devices, and communications devices, all along at the

same time, on the same system.

Before we conclude this content on what virtualization is

used to rapidly and securely deploy security toolsets, we

will give you links to Virtual Machine software you

can deal with over a trial bases (or purchase) and a minimum of

one that is certainly absolutely free.

How We Use Virtual Machines To target different Testing

------------

Although the vast majority of work we do is security

assessment, we routinely deploy security measures for instance

perimeter defense, or enterprise firewall solutions. Many

times, we're also replacing a current immune system and desire

to ensure that as we cut-over in to the new system,

everything will function properly. To illustrate, when

deploying a firewall, or firewall clusters, we could simulate

the cluster design by installed the system into virtual

machines, a single physical system, and try out the internal

firewall to firewall communications. Also, before

deploying the firewalls, we can easily produce a virtual machine to

represent each network protected through the firewalls and test

connectivity / communication on each network e. g. Internet,

private network, DMZ's, along with other protected nets, with

just one system (ordinarily a beefy laptop with a chunk of

memory). This strategy of testing earlier than cutting over has

proven invaluable and mitigates the danger of serious problems

that might prove.

How We Use Virtual Machines In Security Assessments

------------

Each time we participate in a security assessment in a customer,

we utilize specialized and proprietary software / tools.

However, after the assessment is fully gone, and that we begin studying

the next test or new customer, we have to start in a clean

platform. We never develop same OS install or demonstration of

tools to target different testing phases or different customers.

Using Virtualization, we certainly have pre-created many operating

environments along the lines of Windows, Linux, BSD, and Solaris to

name a couple of, with clean installs and hardened operating

systems. These pre-created, secure environments also contain

all hidden tools for your version of customer environment

and security assessment we'll be focusing on. With the help of

Virtual Machines, we will deploy our testing platforms within

minutes, not hours, and start feeling confident these are secure and

ready to work. The reality is, we could carry these types of

ready-to-go operating environments around weight training travel

using high capacity external disk systems. These

size associated with a regular paperback book.

How Else Can Virtual Machines Be Used

------------

The application, use, and selling point of Virtualization is definitely

broad. If anyone is in the house, or technical individuals that aspire to

learn new operating environments, Virtual Machines generally is a

great tool for learning. As opposed to purchasing multiple

physical machines to set up the computer itself and

applications you would like to become educated on, you may

purchase one performance based system, a laptop, and

use virtualization running all of these books immediately. They can be

configured without difficulty to speak in concert.

Another "big" benefit in utilizing Virtual Machines, is because they can

be configured to more efficiently and efficiently utilize

your hardware investment. Such as, in place of

purchasing two mid-range systems to do two different

applications, you possibly can if you buy one an use virtualization

to run them side-by-side. Usually, if you use

dedicated systems for only 1 or two applications, the

hardware is underutilized. Would it not be described as a wise investment if

the server you bought is merely being exercised at say, "25"

percent of their capacity / capability? Virtualization can

help you increase the investment you are in performance

based systems, possesses an added benefit to server

consolidation.

Conclusion

------------

Even if you're just interested in learning Virtual Machine

technology, it might b a fantastic way to learn many elements of

computing and network essentials. There are several major

players throughout the Virtualization industry, similar to VMware.

VMware provides commercial Virtualization products, for

workstation or desktop environments. You should also visit

Xensource, an ideal open-source (without charge ) Virtual Machine

solution. There is a demo you'll be able to download, burn to CD, and

boot from, depends upon can download the product and

install it over a dedicated system.

Regardless with the reason you've for exploring

Virtualization, We can tell you until this technology as going

to manifest as a big player before i write again. In truth, processor

manufacturers are even making plans to make processors

that are Virtual Machine aware.

You may reprint or publish this informative article totally free providing

the bylines are included.

Original URL (The online market place version as soon as i've )

------------

[http://www.defendingthenet.com/NewsLetters/Virtual-Machines]

-Rapid-Deployment-Of-Security-Tools. htm" target=_blank>

Virtual Machines

.

Tuesday, August 2, 2011

Can it Free Anti-Spam Software - ESVA Email Security Virtual Appliance (ESVA)



Are you wanting a 'Free (without charge ) and Easy' antispam? or spam blocker solution to your organization that support multiple email domains?

Are your buying anti-spam solution is often deployed inside of your production environment for under 20 min?

ESVA Email Security Virtual Appliance (ESVA) is really a FOSS-based anti-spam solution? designed by Andrew MacLachlan since year 2005. ESVA is actually a pre-built Virtual Appliance that is run on virtual machines. The modern version of ESVA can managed with VMWare, managed with Citrix XenServer, Microsoft Hyper-V and VMware platforms.

The healthy the required forms is actually stop for merely 2 long years within the next day the production of version 2058. I have been so happy that current version 2060 isn't available. To download the new version please click ESVA's GD official website.

The major products in ESVA are:

  • CentOS - Robust Red Hat-cloned Operating System


  • MailScanner - Anti-spam package for e-mail gateway systems.


  • MailWatch- Web-based? admin page for MailScanner


  • Postfix -? Email System


  • SQLgrey - Greylisitng Filtering


  • Webmin - Web-based? admin page CentOS and Postfix admin


  • ClamAV - Free antivirus


  • Distributed Checksum Clearinghouses (DCC)? & Vipul's Razor - Bulk Spam Mail detection


  • Pyzor - Spam detecting network


  • SpamAssassin? - Well-known spam filtering package for header,? text analysis, Bayesian filtering, DNS blocklists and filtering database


  • FuzzyOCR - Content and properties of images Filtering in accordance with fuzzy logic


  • MailGraph - Graphical Mail statistics tools

Why Cash in ESVA?

The benefit for using ESVA are:

  1. Free on price,


  2. robust system,


  3. filtering accuracy


  4. domain and sender black-listing


  5. domain and sender white-listing


  6. quarantine and release report (per user basis or per domain)


  7. easy to utilise and customized.

I've deployed self-customized version of ESVA in your datacentre since 2007 as well as being still our best anti-spam solutions. Although, Bayesian filtering method require chance to built on SPAM or HAM database. Overtime, ESVA's on mail filtering gets to be more effective to differentiate concerning the ham additionally, the spam can compare to some commercial products.

We have 2 units of ESVA deployed at layer2 running our datacentre to manage greater than 500 domains and 10, 000 level of email by the hour. Our ESVA may be used for e-mail quarantine, anti-virus scanning, fuzzy OCR and Bayesian filtering.

However, a small number of important features when i think mcdougal would include: -

  1. 鐕 SMTP Authentication or LDAP integration


  2. No Subject Filtering


  3. No Keyword Filtering


  4. Incorrect GIF and JPEG filtering

Some of your above-mentioned weakness are generally solved by scripts customization. However, I have to understand the feature associated with package and plug-in and file path. Current, I'm compiling FAQ and customization configuration and hope that anyone using of ESVA may be profit by it.

Nevertheless, ESVA belongs to the easiest and powerful FOSS-based spam solution I ever deployed. Its helps your company on spam issues.? /p>

.