File Virtualization Rss

Security Flaws in VMWare

Posted by IT Editor | Posted in Remote Security | Posted on December 24th, 2008

Tags: ,

Earlier this year, VMWare upped the ante on the security of their hypervisor by introducing VMSafe in partnership with major security software providers. The system works by providing APIs that are open only to security companies who can quickly develop and deploy new patches within the system. Traditional computing security problems are only amplified on a virtual system, where hackers can access a larger number of potential loopholes to attack a machine. About two dozen leading security firms are part of the VMSafe program, and have developed dedicated programs that monitor the major components of a virtual machine, including the system’s memory, hard drive and input-output drivers.

Hackers have created a number of dedicated attacks on virtual desktops, including direct attacks on the OS Kernel or hiding Trojan horses in device drivers where security software traditionally hasn’t checked. At this point, it’s an arms race between security vendors and hackers to safeguard virtual PCs. Look for major vendors such as Symantec, McAfee and Trend Micro to release new software suites dedicated to protecting VMWare-based machines. The notion of installing a basic program (even with real time updates) and ensuring the safety of your machine is out-dated, and VMWare recognizes that. Part of the concern is that anti-virus and computer security programs lag behind early adopters, allowing hackers and criminals fertile ground to explore new techniques. If you are using a virtual OS, make sure that you make every effort to protect your computer, as well as safeguarding your data through both hardware and software-based firewalls.