The Challenge of Virtualization Security

This is one of the excellent articles that I've seen this year. It is great, and it tells the root cause for most of the problems we faced nowadays.

The real problem of security in a virtualization world is not technical, it is organizational and operational.

With the consolidation of applications, operating systems, storage, information, security and networking -- all virtualized into a single platform rather than being discretely owned, managed and supported by (reasonably) operationally-mature teams -- the biggest threat we face in virtualization is now we have lost not only visibility, but the clearly-defined lines of demarcation garnered from a separation of duties we had in the non-virtualized world.

See the full article at:
>>> http://rationalsecurity.typepad.com/blog/2008/03/the-challenge-o.html