- It's the applications, stupid
- Will a whitelist save personal computing?
- Thousands of Web sites under attack
- To solve the unsolvable problem
- Re-thinking the security of virtual machines
- Security Development Lifecycle trumps code complexity
- Is your Web site FIPS compliant?
- Computer security: Why have least privilege?
- Strategic security: Get a handle on authentication
- Control user installs of software
February 12, 2007 | Comments: (0)
IBM puts a 1000 hypervisors on a computer and secures them
The Register reported this week that IBM is announcing a platform capable of running a 1000 VMs.
Read their report here.
Hypervisors and VMs are exploding everywhere...at vendors, large and small, and at clients. These days I'm rarely at a client who isn't betting the bank on VMs and hypervisors.
What caught my eye on this article was IBM's work on moving the Trusted Computing Group's (TCG) Trusted Platform Module over to hypervisors (well, just Xen, right now). I'm delighted that IBM is leading the way with secure hypervisors and with porting TCG goals to VM environments. I'm not sure if any other vendors are working on similar projects, and if so, what stage they are in, but I want to congratulate IBM for its leadership in this arena.
Posted by Roger Grimes on February 12, 2007 04:10 AM
RATE THIS ARTICLE:
-

- COMMENTS
During my recent trip to the RSA 2007 exhibition I became aware of a, I believe, very significant element of Trusted Computing. And it has to do with the pre-boot process in the secure platform.
There is a company by the name of Wave Systems Corp. ( http://www.wave.com ) which appears to be instrumental in Trusted Computing. I just learned that they apparently were a founding member of the TCG.
Wave recently presented to institutional investors during RSA at San Francisco. In a presentation ( http://www.wsw.com/webcast/agc5/wavx/ ) the CEO pointed to Wave's involvement in the preboot process (...starting at 13:50 into the presentation). In conjunction with the upcoming Seagate and Hitachi FDE hard drives this is, in my opinion, of the utmost importance. It really implies that, at this time, only Dell and Gateway can offer truly TCG secure platforms (Wave filed an 8K with the SEC) with hardware full disk encryption ( http://www.wave.com/news/press_archive/06/061208_8K.html ) .
I did some further search and found that Wave actually has been issued a patent ( http://tinyurl.com/2c6h6t ) which totally covers the mutual authentication of a main security processor (TPM) with secure peripherals (i.e. FDE hard drives) in the preboot environment. It further appears that Wave has built all the necessary, TPM interoperable, management tools (client and server).
TOP STORIES
Top 10 stories of the weekA new place to hide rootkits
Sun exec on OpenSolaris, Linux
AT&T: No free iPhone Wi-Fi info
MS to appeal E.U. fine
XP SP3 causes endless reboots
Vista as insecure as Win 2000
Google grilled on human rights
Java ubiquity an edge in RIA battle
The InfoWorld news quiz
ADDITIONAL RESOURCES

- Application Security: Threats and How to Counter Them
- Why Linux Threats Mean Business
- Minding the Machines: PC Disaster Recovery for the Enterprise

- Protect Your Data with SSL
- Prevent Your Next Microsoft Exchange Outage
- 11 Myths About Microsoft Exchange Backup & Recovery





