Putting Simon Crosby and Chris Hoff on the same panel to discuss virtualization security is a recipe for a good lively discussion. At the end of the panel, the audience was not disappointed. In addition to Crosby and Hoff, the panel also included Michael Berman of Catbird and Stephen Herrod of VMware.
The discussion started with some hi jinx by Crosby and Hoff. Crosby handed out gifts to the panelists that included a broken toy sword and a ball and chain. Hoff gave out cigars, one notably much smaller for his nemesis, Mr. Crosby. Despite Chris Hoff's sometimes-flamboyant style, he initially came out mild mannered and on an even keel. His moderate, centrist and thoughtful approach lasted throughout the discussion. Conversely, Simon Crosby of Citrix and huge proponent of Xen spent most of his time trying to put VMWare into a corner. Crosby touted Xen as the most secure hypervisor system because of its open nature and its continuous real life testing because of it's use as the foundation of Amazon's EC2 offering.
Despite the moderator's attempts to encourage the panel to discuss real world security implications of virtualization, the topics kept going back to the implementation and security of VMware products like vShield. In the final moments of the session, the panelists did finally provide a few recommendations worthy of implementing today. One of these nuggets was that insight included most of the security basics necessary for all systems, virtualized or not. Examples of these basics included using configuration guidelines, creating operational plans that include security and risk considerations and building architectures that consider the security implications of the entire virtualization life cycle.
Overall, the virtualizations security panel was entertaining and insightful.
