Virtualization Security

Dave Shackleford 지음

Sybex 2012년 11월 08일 출간

작품소개

책소개

Securing virtual environments for VMware, Citrix, and Microsoft hypervisorsVirtualization changes the playing field when it comes to security. There are new attack vectors, new operational patterns and complexity, and changes in IT architecture and deployment life cycles. What's more, the technologies, best practices, and strategies used for securing physical environments do not provide sufficient protection for virtual environments. This book includes step-by-step configurations for the security controls that come with the three leading hypervisor--VMware vSphere and ESXi, Microsoft Hyper-V on Windows Server 2008, and Citrix XenServer.Includes strategy for securely implementing network policies and integrating virtual networks into the existing physical infrastructure Discusses vSphere and Hyper-V native virtual switches as well as the Cisco Nexus 1000v and Open vSwitch switches Offers effective practices for securing virtual machines without creating additional operational overhead for administrators Contains methods for integrating virtualization into existing workflows and creating new policies and processes for change and configuration management so that virtualization can help make these critical operations processes more effectiveThis must-have resource offers tips and tricks for improving disaster recovery and business continuity, security-specific scripts, and examples of how Virtual Desktop Infrastructure benefits security.

목차

Introduction xixChapter 1 Fundamentals of Virtualization Security 1Virtualization Architecture 1Threats to a Virtualized Environment 4Operational Threats 4Malware-Based Threats 5VM Escape 6Vulnerabilities in Virtualization Platforms 9How Security Must Adapt to Virtualization 9Challenges for Securing Virtualized Environments 10Challenges of Vulnerability Testing in a Virtualized Environment 10Chapter 2 Securing Hypervisors 15Hypervisor Configuration and Security 15Configuring VMware ESXi 17Patching VMware ESXi 17Securing Communications in VMware ESXi 27Change and Remove Default Settings on VMware ESXi 33Enable Operational Security on VMware ESXi 34Secure and Monitor Critical Configuration Files in VMware ESXi 38Secure Local Users and Groups on VMware ESXi 40Lock Down Access to Hypervisor Console 47Configuring Microsoft Hyper-V on Windows Server 2008 52Patching Hyper-V 53Securing Communications with Hyper-V 53Changing Hyper-V Default Settings 56Enabling Operational Security for Hyper-V 59Securing and Monitoring Critical Confi guration Files for Hyper-V 60Secure Local Hyper-V Users and Groups 63Lock Down Access to the Hyper-V Hypervisor Platform 68Configuring Citrix XenServer 72Patching XenServer 72Secure Communications with XenServer 75Change XenServer Default Settings 76Enabling XenServer Operational Security 80Secure and Monitor Critical XenServer Configuration Files 81Secure Local Users and Groups 81Lock Down Access to the XenServer Platform 88Chapter 3 Designing Virtual Networks for Security 93Comparing Virtual and Physical Networks 93Virtual Network Design Elements 95Physical vs Virtual Networks 98Virtual Network Security Considerations 99Important Security

작가정보

저자(글) Dave Shackleford

저자 :

저자 :

저자 :

저자 :

저자 :
저자 :
저자 :
Dave Shackleford is founder and Principal Consultant with Voodoo Security, Senior Vice President of Research and CTO at IANS, and a SANS senior instructor and course author. He has consulted with hundreds of organizations in the areas of security, regulatory compliance, and network architecture and engineering. He is a VMware vExpert and has extensive experience designing and configuring secure virtualized infrastructures. Recently, Dave coauthored the first published course on virtualization security for the SANS Institute. He currently serves on the board of directors at the SANS Technology Institute and helps lead the Atlanta chapter of the Cloud Security Alliance.