I'll Make Do With My Not-So-Virtual World
When another state agency talks up its virtualization program, our security manager questions whether she's missed something. By C.J. Kelly
Computerworld - As I listened to the webcast from a sister state agency describing what cool new things it was doing, I couldn't help talking back. "Why do technical people always try to make it sound like they are doing something much bigger and better than anyone else? Why are they bragging about implementing videoconferencing? Most of us have already done that. And what was that about Web services? Do they even know what the term means?"
It didn't seem so, since the alleged Web service was a Web-based security gateway for authenticating other agencies' personnel before letting them access the agency's databases. That's a service you access via the Web, but it's no Web service. The fellow talking was rubbing me the wrong way. I have an aversion to people who spout undefined acronyms and make things sound more complicated than they are, and he was doing both of those things.
Then he said that his agency had "virtualized" its environment and suggested that other agencies look into EMC 's VMware. This was too much for me. If I'd been in the meeting, I would have spoken up. I like to work in a collaborative environment, where you ask people to help you understand a problem, not tell them that you've solved it and they should listen up. Chances are, you've probably solved only a small piece of it and you could learn a lot by hearing other people's ideas.
Afterward, I called a couple of colleagues and asked them if they were using virtualization other than disk management and if they had any security concerns around it. None of them was doing much with it. Maybe I don't hang out in the right crowd. What's all the hype about? I wondered.
Virtualization is nothing new, of course. The concept goes back to the '50s and '60s, when IBM led the way with the development of the virtual machine and the virtual machine manager. VMM is software that lets you run several instances of an operating system on a single piece of hardware, with each instance of the operating system located within its own virtual machine along with its companion applications. The VMM controls all interaction between each virtual machine and the hardware (resources, drivers, etc.). You can run a variety of applications on the same server without worrying about incompatibilities or resource conflicts.
Virtualization has been improved upon countless times in the past 50 years. My own experience with it includes managing disk arrays under HP-UX in a "virtual" way,


- Excel 2010 Cheat Sheet
- Register for this Computerworld Insider Cheat Sheet and gain access to hundreds of premium content articles, guides, product reviews and more.
- Driving Secure Enterprise File Sharing and Syncing in the Enterprise
- GroupLogic's new activEcho is the industry's only secure Enterprise File Sharing and Synching solution that balances the need for simplicity for the end...
- The Enterprise File Sharing Option
- Enterprises and IT departments need to address several critical security issues when considering file sharing and syncing products. Many of today's solutions do...
- Security Strategies to Virtualizing Internet-Facing Applications
- The IT organization at Intel has set a goal to transition their enterprise to a private cloud for their Office and Enterprise applications....
- Cloud Security Planning Guide
- Cloud security considerations span protecting hardware and platform technologies in the data center to enabling regulatory compliance and defending cloud access through different...
- Cloud Security Vendor Round Table
- This vendor round table guide will help you to evaluate different cloud technology vendors and service providers based on a series of questions... All Security White Papers
- Live Webcast
Data Privacy and Protection in Production Environments: New Research from Ponemon Institute - Date: Wednesday, June 13, 2012, 1:00 PM EDT / 10:00 AM PDT
In a recent study conducted by Ponemon Institute, fifty-five percent of respondents... - Data Privacy and Protection in Production Environments: New Research from Ponemon Institute
- Date: Wednesday, June 13, 2012, 1:00 PM EDT / 10:00 AM PDT
In a recent study conducted by Ponemon Institute, fifty-five percent of respondents... - Security Certifications 101 - BlackBerry and all those acronyms what do they mean and why they matter?
- FIPS, Common Criteria, CAPS, AISEP, NFC, NIST, Fraunhofer SIT, CESG, DSD - these are just some of the government and industry certifications which...
- BlackBerry PlayBook OS 2.0 Security Overview
- The presentation provides an overview of BlackBerry PlayBook OS 2.0 security capabilities and features, including: BlackBerry® Balance™ technology, BlackBerry® Bridge, data-at-rest protection, and...
- BlackBerry NFC Security Overview
- The presentation on NFC security will provide an overview of the security protections built into the BlackBerry platform to protect users, application developers...
- Playing Defense: Staying on Top of Your Disaster Recovery Game
- When it comes to disaster recovery, rapidly growing data volumes, distributed computing models, and new technologies all combine to present an ever-changing playing... All Security Webcasts