The Great Arms Race For Security: Virtualization

The Great Arms Race For Security: Virtualization

Since its infancy in the early seventies when the first computer virus was created, the malware and anti-malware business has grown into multi-billion dollar industries. No longer are script kiddies creating malware for notoriety, instead the malware industry is run by organized criminals who invest time and money in new technologies and methods to compromise systems for profit.

The evolution of malware is the driver for the progress of security. Malware propagation has gone from floppy disks, to email attachments, and on to remote exploits of vulnerabilities. Malicious software itself has become more sophisticated by using kernel-level code to hide as rootkits, effectively moving down the stack. The result: an ‘arms race’ between organized criminals and security vendors. Each party reacts to changes in the industry to gain the upper hand. Take for example the growth in broadband adoption since the early 2000’s. As broadband adoption grew so too did the number of endpoints in botnets.

Security vendors process in excess of 4 billion requests per day to stop malware from propagating. However, the basic fundamentals of security have not changed in over 20 years. Malware takes advantage of exploiting vulnerabilities in operating systems and applications that run in them. The key point is that security solutions are implemented to stop malware within an operating system; however there is no such thing as a full-proof system. Security solutions operate within the confines of an operating system privilege structure. When attempting to inspect the system it is impossible to guarantee the integrity of the execution space of the security software running in the same execution space as malware. Therefore, beyond the question of whether or not a system has been compromised, it is a matter of what has not been found. With this in mind, the challenge for the security industry is to make the cost of attack so expensive that organized criminals choose different easier methods – for example basic social engineering techniques like a 451 scam.

Just as the rise of the Internet provided new opportunities for attackers, so too has virtualization and cloud technologies provided both security experts and attackers with new opportunities. With cloud computing the security challenge is even further exacerbated simply because end-users do not have access to the underlying infrastructure. Understanding how changing the infrastructure beneath endpoints affects endpoint security is elemental for security strategies. With all the benefits that virtualization brings, there are also new risks. Side channel exploitation, where a virtual machine is attacked from a neighboring virtual machine via a vulnerability are possible. This is simply due to the fact that multiple virtual machines share the same hardware via the hypervisor. In the case of cloud computing where multi-tenancy is the norm, there is no assurance that the end-user controlling a neighboring virtual machine has malicious intentions or not.

Virtualization and cloud computing is changing the security industry, both from a technology standpoint and the way it is consumed. With the benefits of a pay-as-you-grow model that cloud computing offers, end-users are able to quickly deploy IT infrastructure that addresses the business need without a large capital outlay. The security industry is evolving to meet this same licensing model requirements. However, even by meeting the needs of end-user license model requirements in the cloud; the challenge still remains the same. It is impossible to guarantee the integrity of the execution space of the security software running in the same execution space as threats.

With virtualization technology we now have the opportunity to exponentially raise the cost of attack on a system by gaining full visibility into the entire stack.

By utilizing hypervisor introspection technology it is possible to ensure the integrity of critical operating system areas, like the kernel for example. Through these introspective techniques threats are prevented from hiding or executing certain payloads within an operating system. Hypervisor introspection provides the security industry with the tooling to exponentially raise the cost of attack, by gaining full visibility into the execution space without operating in the same space that threats operate in. Similar to the movie “Minority report” where in the future criminals are arrested before they commit a crime, so too does virtualization technology enable security vendors to gain full visibility into systems and operate outside of the execution space that threats exist in.

By Gavin Hill, director of virtualization and cloud security research, Bitdefender

For over a decade, Gavin Hill has been the driver of security technologies for global organizations in markets that encompass North America, Europe, and Asia. With extensive technical-to-business experience that spans development, product management, and marketing, Hill has a proven record of success in driving first-to-market solutions. At Bitdefender, Hill is leading the product management and product marketing groups for virtualization and cloud security solutions.

About CloudTweaks

Established in 2009, CloudTweaks is recognized as one of the leading authorities in connected technology information and services.

We embrace and instill thought leadership insights, relevant and timely news related stories, unbiased benchmark reporting as well as offer green/cleantech learning and consultive services around the world.

Our vision is to create awareness and to help find innovative ways to connect our planet in a positive eco-friendly manner.

In the meantime, you may connect with CloudTweaks by following and sharing our resources.

View All Articles

Sorry, comments are closed for this post.

E-Commerce Advances For Savvy Marketers

E-Commerce Advances For Savvy Marketers

Digital Marketing Platforms Advertising and marketing techniques have progressed rapidly in the last decade with both channel focus and the direction of content shifting considerably due primarily to advances in cloud technology. Gartner’s Magic Quadrant for Digital Commerce 2016 singles out a few ecommerce providers who are topping their sector in both ability to execute…

The Lighter Side Of The Cloud – Energy Battle

The Lighter Side Of The Cloud – Energy Battle

By David Fletcher Please feel free to share our comics via social media networks such as Twitter, Facebook, LinkedIn, Instagram, Pinterest. Clear attribution (Twitter example: via@cloudtweaks) to our original comic sources is greatly appreciated.

Recent Articles - Posted by
Cloud Comings and Goings

Cloud Comings and Goings

Cloud Power Amazon Web Services – the giant of cloud computing – is on track to do $10 Billion in revenue this year. Yet, rumors swirl that Apple may take a huge chunk of business away from them and Dropbox has definitely left AWS. Is something wrong at AWS? Wait, Salesforce.com (SFDC) – the granddaddy of…

Digital Transformation: Not Just For Large Enterprises Anymore

Digital Transformation: Not Just For Large Enterprises Anymore

Digital Transformation Digital transformation is the acceleration of business activities, processes, and operational models to fully embrace the changes and opportunities of digital technologies. The concept is not new; we’ve been talking about it in one way or another for decades: paperless office, BYOD, user experience, consumerization of IT – all of these were stepping…

Connecting the Digital Dots with the Internet of Things

Connecting the Digital Dots with the Internet of Things

The IoT Explosion In The Cross-Industry Category Gartner estimates that 6.4 billion Internet of Things (IoT) devices will be in use in 2016, nearly a third more than last year, and with attentive patrons such as Samsung, recently committing to invest $1.2 billion into IoT research in the US over four years, we can happily…

Cloud Infographic – Monetizing Internet Of Things

Cloud Infographic – Monetizing Internet Of Things

Monetizing Internet Of Things There are many interesting ways in which companies are looking to connect devices to the cloud. From the vehicles to kitchen appliances the internet of things is already a $1.9 trillion dollar market based on research estimates from IDC. Included is a fascinating infographic provided by AriaSystems which shows us some of the exciting…

Infographic: IoT Programming Essential Job Skills

Infographic: IoT Programming Essential Job Skills

Learning To Code As many readers may or may not know we cover a fair number of topics surrounding new technologies such as Big data, Cloud computing , IoT and one of the most critical areas at the moment – Information Security. The trends continue to dictate that there is a huge shortage of unfilled…

Cloud Infographic: The Explosive Growth Of The Cloud

Cloud Infographic: The Explosive Growth Of The Cloud

The Explosive Growth Of The Cloud We’ve been covering cloud computing extensively over the past number of years on CloudTweaks and have truly enjoyed watching the adoption and growth of it. Many novices are still trying to wrap their mind around what the cloud it is and what it does, while others such as thought…

The Industries That The Cloud Will Change The Most

The Industries That The Cloud Will Change The Most

The Industries That The Cloud Will Change The Most Cloud computing is rapidly revolutionizing the way we do business. Instead of being a blurry buzzword, it has become a facet of everyday life. Most people may not quite understand how the cloud works, but electricity is quite difficult to fathom as well. Anyway, regardless of…

Cloud Computing – The Game Changer

Cloud Computing – The Game Changer

Global Cloud Index In October, Cisco released its Global Cloud Index (GCI) report for 2014-2019, projecting a near 3-fold growth of global data center traffic, with predictions that this traffic will reach 8.6 zettabytes (cloud data center traffic) and 10.4 zettabytes (total data center traffic) per year in 2019 and 80% of it will come…

Cost of the Cloud: Is It Really Worth It?

Cost of the Cloud: Is It Really Worth It?

Cost of the Cloud Cloud computing is more than just another storage tier. Imagine if you’re able to scale up 10x just to handle seasonal volumes or rely on a true disaster-recovery solution without upfront capital. Although the pay-as-you-go pricing model of cloud computing makes it a noticeable expense, it’s the only solution for many…

Cloud Infographic – The Data Scientist

Cloud Infographic – The Data Scientist

Data Scientist Report The amount of data in our world has been exploding in recent years. Managing big data has become an integral part of many businesses, generating billions of dollars of competitive innovations, productivity and job growth. Forecasting where the big data industry is going has become vital to corporate strategy. Enter the Data…