Feeds

Virtualization for security

Vista of fluffy white clouds

Securing Web Applications Made Simple and Scalable


I've been working with virtualization software for quite some time, and sometime watching and waiting until it became more widely usable. In the last few years there's been a tremendous growth in the virtualization options that computer users have available to them. Security people in particular tend to be very familiar with the technology.

VMWare. As far as I'm concerned, the king of the mountain was, and still remains, VMWare. You can pay for various versions of VMWare's software, and in my opinion they're worth it. In the last few months, however, VMWare has reduced the price for both its Player and now its Server to zero. Want to use VMWare on your Windows or Linux box to run other operating systems? Thanks to VMWare's actions, you have no excuse. And now it appears that VMWare has gotten its flagship software running on the new Intel-based Macs in the lab, and will hopefully be releasing the software sometime soon. Once that happens, an Apple Mac becomes the only machine able to legally run Mac OS X, Windows, and Linux at the same time, thus causing me to drool in anticipation.

Win4Lin. Win4Lin is for Linux users who want to run Windows on their boxes. Years ago I used to rely on Win4Lin to run Windows 98 inside Red Hat, Libranet, and K/Ubuntu, and it worked well. For Penguinistas who need Windows, Win4Lin might be the perfect option (although I've heard that Win4Lin Pro, which supports installing Windows 2000 and XP, isn't quite as robust as Win4Lin Classic, which only supports the Windows 9x line).

Xen. The object of a lot of attention, the open source and free Xen will undoubtedly show its face on more and more Linux distros as it matures. Since it's part of the kernel, performance is lightning fast.

Parallels. While Mac OS users are waiting for VMWare, they can try out Parallels Workstation, which is here and working now. Although the software has worked on Windows and Linux boxes for some time, it is the new support for Mactel hosts that has drawn a lot of attention in the last several weeks. Friends of mine are using it on their new MacBooks, and they report awesome speed, stability, and success.

Microsoft Virtual PC and Virtual Server. Microsoft purchased Virtual PC from Connectix since it was the leading tool at the time for Mac users to run Windows. Unfortunately, it always ran Windows slowly (since it was emulation, not virtualization, software); even worse, it doesn't work at all with the new Intel-powered Macs, and it's not clear if Microsoft is going to port the software or not. Virtual Server, however, is a different story. Also purchased from Connectix, Microsoft is making a big push with Virtual Server by recently announcing that it is now free. Even bigger, Microsoft will also support Linux installs under Virtual Server. Is that the sound of chattering teeth in Hades I hear?

The smart choice: opportunity from uncertainty

More from The Register

next story
Mozilla fixes CRITICAL security holes in Firefox, urges v31 upgrade
Misc memory hazards 'could be exploited' - and guess what, one's a Javascript vuln
Manic malware Mayhem spreads through Linux, FreeBSD web servers
And how Google could cripple infection rate in a second
How long is too long to wait for a security fix?
Synology finally patches OpenSSL bugs in Trevor's NAS
Don't look, Snowden: Security biz chases Tails with zero-day flaws alert
Exodus vows not to sell secrets of whistleblower's favorite OS
Roll out the welcome mat to hackers and crackers
Security chap pens guide to bug bounty programs that won't fail like Yahoo!'s
HIDDEN packet sniffer spy tech in MILLIONS of iPhones, iPads – expert
Don't panic though – Apple's backdoor is not wide open to all, guru tells us
Researcher sat on critical IE bugs for THREE YEARS
VUPEN waited for Pwn2Own cash while IE's sandbox leaked
prev story

Whitepapers

Top three mobile application threats
Prevent sensitive data leakage over insecure channels or stolen mobile devices.
Implementing global e-invoicing with guaranteed legal certainty
Explaining the role local tax compliance plays in successful supply chain management and e-business and how leading global brands are addressing this.
Boost IT visibility and business value
How building a great service catalog relieves pressure points and demonstrates the value of IT service management.
Designing a Defense for Mobile Applications
Learn about the various considerations for defending mobile applications - from the application architecture itself to the myriad testing technologies.
Build a business case: developing custom apps
Learn how to maximize the value of custom applications by accelerating and simplifying their development.