Rational Survivability

Rational Survivability http://www.rationalsurvivability.com/blog Hoff's Ramblings about Information Survivability, Information Centricity, Risk Management and Disruptive Innovation. Oh, I have a fondness for virtualization and cloud computing security, too... Thu, 02 Sep 2010 05:55:33 +0000 http://backend.userland.com/rss092 en VMware’s (New) vShield: The (Almost) Bottom Line http://www.rationalsurvivability.com/blog/?p=2646 How To Wield the New vShield (Edge, App & Endpoint) http://www.rationalsurvivability.com/blog/?p=2639 Why Is NASA Re-Inventing IT vs. Putting Men On the Moon? Simple. http://www.rationalsurvivability.com/blog/?p=2627 Dear Verizon Business: I Have Some Questions About Your PCI-Compliant Cloud… http://www.rationalsurvivability.com/blog/?p=2619 Hoff’s 5 Rules Of Cloud Security… http://www.rationalsurvivability.com/blog/?p=2607 VMworld – v0dgeball Deathmatch Details: vSquirrels vs. Sakacc’s Army… http://www.rationalsurvivability.com/blog/?p=2596 Video Of My Cloudifornication Presentation [Microsoft BlueHat v9] http://www.rationalsurvivability.com/blog/?p=2560 Airing Private Cloud’s Dirty Laundry… http://www.rationalsurvivability.com/blog/?p=2384 If You Could Have One Resource For Cloud Security… http://www.rationalsurvivability.com/blog/?p=2378 See You At Black Hat 2010 & Defcon 18? http://www.rationalsurvivability.com/blog/?p=2349 Reflections on SANS ’99 New Orleans: Where It All Started http://www.rationalsurvivability.com/blog/?p=2293 On Amrit Williams’ (BigFix) Beyond The Perimeter Podcast http://www.rationalsurvivability.com/blog/?p=2262 Incomplete Thought: Why We Need Open Source Security Solutions More Than Ever… http://www.rationalsurvivability.com/blog/?p=2173 CLOUDINOMICON: Idempotent Infrastructure, Survivable Systems & Bringing Sexy Back to Information Centricity http://www.rationalsurvivability.com/blog/?p=2121 The Security Hamster Sine Wave Of Pain: Public Cloud & The Return To Host-Based Protection… http://www.rationalsurvivability.com/blog/?p=2064 The Classical DMZ Design Pattern: How To Kill Security In the Cloud http://www.rationalsurvivability.com/blog/?p=2023 Friday Cloud Poetry: “On the Bullshit That is False Cloud” http://www.rationalsurvivability.com/blog/?p=1912 All For One, One For All? On Standardizing Virtual Appliance Operating Systems http://www.rationalsurvivability.com/blog/?p=1904 Incomplete Thought: The DevOps Disconnect http://www.rationalsurvivability.com/blog/?p=1890 Amazon Web Services Hires a CISO – Did You Know? http://www.rationalsurvivability.com/blog/?p=1886 Novell Marketing Genius: Interpretive Reading Of One Of My Cloud Security Blog Posts… http://www.rationalsurvivability.com/blog/?p=1883 The Hypervisor Platform Shuffle: Pushing The Networking & Security Envelope http://www.rationalsurvivability.com/blog/?p=1877 Virtualization & Cloud Don’t Offer An *Information* Security Renaissance… http://www.rationalsurvivability.com/blog/?p=1865 Security: In the Cloud, For the Cloud & By the Cloud… http://www.rationalsurvivability.com/blog/?p=1860 Dear SaaS Vendors: If Cloud Is The Way Forward & Companies Shouldn’t Spend $ On Privately-Operated Infrastructure, When Are You Moving Yours To Amazon Web Services? http://www.rationalsurvivability.com/blog/?p=1845 You Can’t Secure The Cloud… http://www.rationalsurvivability.com/blog/?p=1836 Introducing The HacKid Conference – Hacking, Networking, Security, Self-Defense, Gaming & Technology for Kids & Their Parents http://www.rationalsurvivability.com/blog/?p=1838 The Four Horsemen Of the Virtualization (and Cloud) Security Apocalypse… http://www.rationalsurvivability.com/blog/?p=1831 Incomplete Thought: “The Cloud in the Enterprise: Big Switch or Little Niche?” http://www.rationalsurvivability.com/blog/?p=1818 Patching the (Hypervisor) Platform: How Do You Manage Risk? http://www.rationalsurvivability.com/blog/?p=1812 More On High Assurance (via TPM) Cloud Environments http://www.rationalsurvivability.com/blog/?p=1809 Good Interview/Resource Regarding CloudAudit from SearchCloudComputing… http://www.rationalsurvivability.com/blog/?p=1806 [Webinar] Cloud Based Security Services: Saving Cloud Computing Users From Evil-Doers http://www.rationalsurvivability.com/blog/?p=1802 Video: Cloud Computing in Government… http://www.rationalsurvivability.com/blog/?p=1799 Incomplete Thought: The Other Side Of Cloud – Where The (Wild) Infrastructure Things Are… http://www.rationalsurvivability.com/blog/?p=1793 Chattin’ With the Boss: “Securing the Network” (Waiting For the Jet Pack) http://www.rationalsurvivability.com/blog/?p=1784 2010 RSA Security Bloggers Award – Thanks A Bunch… http://www.rationalsurvivability.com/blog/?p=1781 RSA Interview (c/o Tripwire) On the State Of Information Security In Virtualized/Cloud Environments. http://www.rationalsurvivability.com/blog/?p=1779 Slides from My Cloud Security Alliance Keynote: The Cloud Magic 8 Ball (Future Of Cloud) http://www.rationalsurvivability.com/blog/?p=1777 Virtual Networking/Nexus 1000v Virtual Switch Blogger Roundtable/WebEx Logistics – March 2nd. http://www.rationalsurvivability.com/blog/?p=1774 Six Year Old Rationalizes the Cloud http://www.rationalsurvivability.com/blog/?p=1771 Don’t Hassle the Hoff: Recent Press & Podcast Coverage & Upcoming Speaking Engagements http://www.rationalsurvivability.com/blog/?p=1755 Comments on the PwC/TSB Debate: The cloud/thin computing will fundamentally change the nature of cyber security… http://www.rationalsurvivability.com/blog/?p=1747 The Automated Audit, Assertion, Assessment, and Assurance API (A6) Becomes: CloudAudit http://www.rationalsurvivability.com/blog/?p=1739 Pimping the Security Non-Cons: Troopers 2010 http://www.rationalsurvivability.com/blog/?p=1735 Microsoft Azure Going “Down Stack,” Adding IaaS Capabilities. AWS/VMware WAR! http://www.rationalsurvivability.com/blog/?p=1727 Where Are the Network Virtual Appliances? Hobbled By the Virtual Network, That’s Where… http://www.rationalsurvivability.com/blog/?p=1717 Hacking Exposed: Virtualization & Cloud Computing…Feedback Please http://www.rationalsurvivability.com/blog/?p=1713 MashSSL – An Excellent Idea You’ve Probably Never Heard Of… http://www.rationalsurvivability.com/blog/?p=1704 Cloud: Security Doesn’t Matter (Or, In Cloud, Nobody Can Hear You Scream) http://www.rationalsurvivability.com/blog/?p=1694 Incomplete Thought: Batteries – The Private Cloud Equivalent Of Electrical Utility… http://www.rationalsurvivability.com/blog/?p=1687 “Vint & Me” – Kickin’ Butt & Takin’ Names (Unfortunately Mine…) http://www.rationalsurvivability.com/blog/?p=1678 Cloud: Over Subscription vs. Over Capacity – Two Different Things http://www.rationalsurvivability.com/blog/?p=1672 Cloud Light Presents: Real Men Of Genius – Mr. Dump All Your Crap In the Cloud Guy. http://www.rationalsurvivability.com/blog/?p=1665 Recording & Playback of WebEx A6 Working Group Kick-Off Call from 1/8/2010 Available http://www.rationalsurvivability.com/blog/?p=1662 To Achieve True Cloud (X/Z)en, One Must Leverage Introspection http://www.rationalsurvivability.com/blog/?p=1657 The Great Cloud Security Challenge: I Triple-Dog-Dare You… http://www.rationalsurvivability.com/blog/?p=1648 How Many Open Letters To Howard Schmidt Do We Need? Just One. http://www.rationalsurvivability.com/blog/?p=1642 2010 – It’s Time for Security Resolutions Not Predictions… http://www.rationalsurvivability.com/blog/?p=1639 Cloud Security Alliance v2.1 Security Guidance for Critical Areas of Focus in Cloud Computing Available http://www.rationalsurvivability.com/blog/?p=1630 Speaking at the 2009 Federal Identity Management & Cybersecurity Conference http://www.rationalsurvivability.com/blog/?p=1620 Cloud Computing Public Service Announcement – Please Read http://www.rationalsurvivability.com/blog/?p=1618 Dear Public Cloud Providers: Please Make Your Networking Capabilities Suck Less. Kthxbye http://www.rationalsurvivability.com/blog/?p=1603 Great InformationWeek/Dark Reading/Black Hat Cloud & Virtualization Security Virtual Panel on 12/9 http://www.rationalsurvivability.com/blog/?p=1596 From the X-Files – The Cloud in Context: Evolution from Gadgetry to Popular Culture http://www.rationalsurvivability.com/blog/?p=1519 Apologizing In Advance: I’ll Be On PaulDotCom 11/27… http://www.rationalsurvivability.com/blog/?p=1573 The Cloud & eHarmony’s 29 Dimensions Of Compatability… http://www.rationalsurvivability.com/blog/?p=1569 ENISA launches Cloud Computing Security Risk Assessment Document http://www.rationalsurvivability.com/blog/?p=1559 Cloud Security: Dilbert Style http://www.rationalsurvivability.com/blog/?p=1554 Just A Reflective Bookmark: Microsoft’s Azure…The Dark Horse Emergeth… http://www.rationalsurvivability.com/blog/?p=1537 The A6 (Audit, Assertion, Assessment, and Assurance API) Working Group is Live. Please join & read the intro. http://www.rationalsurvivability.com/blog/?p=1533 Silent Lucidity: IaaS — Already A Dinosaur? The Evolution of PaaSasaurus Rex… http://www.rationalsurvivability.com/blog/?p=1523 Dear Santa: All I Want For Christmas On My Amazon Wishlist Is a Straight Answer… http://www.rationalsurvivability.com/blog/?p=1513 Cloud/Cloud Computing Definitions – Why they Do(n’t) Matter… http://www.rationalsurvivability.com/blog/?p=1507 Don’t Hassle the Hoff: Recent Press & Podcast Coverage & Upcoming Speaking Engagements http://www.rationalsurvivability.com/blog/?p=1497 Can We Secure Cloud Computing? Can We Afford Not To? http://www.rationalsurvivability.com/blog/?p=1491 Incomplete Thought: The Cloud Software vs. Hardware Value Battle & Why AWS Is Really A Grid… http://www.rationalsurvivability.com/blog/?p=1476 “Open” means more than just an API…Google’s Data Liberation Project Ponies Up http://www.rationalsurvivability.com/blog/?p=1466 Amazon Web Services: It’s Not The Size Of the Ship, But Rather The Motion Of the… http://www.rationalsurvivability.com/blog/?p=1456 Transparency: I Do Not Think That Means What You Think That Means… http://www.rationalsurvivability.com/blog/?p=1440 Cloud: The Other White Meat…On Service Failures & Hysterics http://www.rationalsurvivability.com/blog/?p=1429 AMI Secure? (Or: Shared AMIs/Virtual Appliances – Bot or Not?) http://www.rationalsurvivability.com/blog/?p=1419 Cloud Providers and Security “Edge” Services – Where’s The Beef? http://www.rationalsurvivability.com/blog/?p=1407 Really Interesting Crap In My Browser Tabs: Poor Man’s Del.icio.us http://www.rationalsurvivability.com/blog/?p=1402 The Emotion of VMotion… http://www.rationalsurvivability.com/blog/?p=1391 Incomplete Thought: Virtual Machines Are the Problem, Not the Solution… http://www.rationalsurvivability.com/blog/?p=1371 Google & AWS: Just Goes To Prove You Can Have Your Cloud and, um, Eat It Too… http://www.rationalsurvivability.com/blog/?p=1359 Redux: Patching the Cloud http://www.rationalsurvivability.com/blog/?p=1354 Incomplete Thought: Forget VM Sprawl, Worry More About SaaSprawl… http://www.rationalsurvivability.com/blog/?p=1344 Quick Question: Any Public Cloud Providers Using Intel TXT? http://www.rationalsurvivability.com/blog/?p=1341 DDoS – A Moose On Cloud’s Table Or A Pea Under The Mattress? http://www.rationalsurvivability.com/blog/?p=1333 Proof Of How I Almost Took The Internet Down… http://www.rationalsurvivability.com/blog/?p=1319 Variety & Darwinism In Solutions Is Innovation, In Standards It’s A War? http://www.rationalsurvivability.com/blog/?p=1316 NESSessary Question: Will Virtualization Undermine Network Equipment Vendors? http://www.rationalsurvivability.com/blog/?p=1310 A Note On Multitenancy As A ‘Defining’ Cloud Attribute… http://www.rationalsurvivability.com/blog/?p=1307 Calling All Private Cloud Haters: Amazon Just Peed On Your Fire Hydrant… http://www.rationalsurvivability.com/blog/?p=1294 On Appirio’s Prediction: The Rise & Fall Of Private Clouds http://www.rationalsurvivability.com/blog/?p=1285 Do We Need CloudNAPs? It’s A Virtually Certain Maybe. http://www.rationalsurvivability.com/blog/?p=1281 Follow-On: The Audit, Assertion, Assessment, and Assurance API (A6) http://www.rationalsurvivability.com/blog/?p=1276 Cloudifornication: Indiscriminate Information Intercourse Involving Internet Infrastructure http://www.rationalsurvivability.com/blog/?p=1271