On the dangers of OVF

————————————————————————————————————-

—————————————————————————————————————
Usually I`m all in favour of Open Standards that are supported by different parties, and the
Open Virtual Machine Format (OVF) pretty much matches these requirements.
The last
Virtualbox has support for it, Simon is telling about it being part of the new
XenConvert v2 Tech Preview .
However,
Reuven wonders why it hasn’t [...]

Dell To Resell Reflex Systems’ Virtual Management Center

Reflex Systems, provider of virtualization management and security solutions, yesterday announced a global reseller agreement that authorizes Dell’s worldwide direct and channel sales forces to sell Reflex VMC (Virtual Management Center).

Embotics Releases White Paper on Virtualization Security

Embotics today announced “Understanding VirtSec,†a new study that focuses on virtual server security issues inherent in IT environments.

0wning Xen … In More Detail

————————————————————————————————————-

—————————————————————————————————————
Over at her
own
blog, Joanna Rutkowska from Invisible Things has some updates on their findings about Xen security as
we earlier reported.
Joanna argues that most of the attacks presented indeed require that the attacker first gains access to the Dom0 before he can launch the attacks but that doesn’t take away the [...]

A Round Table on Virtualization Security with Industry Experts

A conference call about virtualization security (virtsec) with Joe Pendry (Director of Marketing at StackSafe), Kris Buytaert (Principle at Consultant Inuits), Tarry Singh (Industry/Market Analyst Founder & CEO of Avastu), Andreas Antonopoulos (SVP & Founding Partner at Nemertes Research),Allwyn Sequeira (SVP & CTO at Blue Lane), Michael Berman (CTO at Catbird), Chris Hoff (Chief Security Architect - Systems & Technology Division and Blogger at Unisys) and Hezi Moore (President, Founder & CTO at Reflex Security).

Invisible Things Lab: Hypervisors Mucho Hackable

Security researchers from Invisible Things Lab claim will be demonstrating how easy it is to hack hypervisors at the next Black Hat conference in Las Vegas in August. More specifically, they’ll be discussing the (in)security of the Xen hypervisor, such as how to plant rootkits, how to bypass various hypervisor anti-subverting techniques, as well as how “Bluepills” can be used in bare-metal hypervisor compromises. They plan on releasing proof-of-concept code.