Security and compliance issues in deeply virtualized dynamic hosting infrastructures

26 Oct
Tuesday, 10/26/2010 9:00am to 10:00am
Seminar

Dennis Moreau
RSA, The Security Division of EMC

Computer Science Building, Room 151

Virtualization technologies have been aggressively adopted based on the promise of better utilization, increased efficiency, reduced cost and improved infrastructure agility. These benefits are delivered over technology layers that provide isolation, intimate resource sharing and dynamic association of workloads with available capacity.

Each of these new technology layers has its own set of configuration controls, policy loci, and behavioral characteristics. Each of these layers also has its unique sets of weaknesses, some of which are exploitable vulnerabilities. In order for hosted services to be compliant, all of the layers of associated hosting technologies must be compliant. Workloads with dissimilar security postures and trust level requirements must be isolated comprehensively across these layers. Finally, dynamically hosted services must be compliant in any state into which they may be driven.

This talk will explore some of the key virtualization centric security and compliance challenges and associated opportunities presented by employing virtualization technologies.

Dennis Moreau, Senior Technology Strategist at RSA, the Security Division of EMC, is a specialist in the application of leading edge technologies to the solution of complex problems in the Information Systems and Utility Computing management domains. His primary focus is in developing enterprise scale solutions to improve efficiency and effectiveness for security, compliance and configuration management. He works actively with NIST, the DoD and the Mitre Corporation on the development of security automation and information standards.

Dr. Moreau has over than 35 years of experience design, evaluation and management of operations and security infrastructures. Prior to joining RSA's CTO Office, he was a founder and the Chief Technology Officer for Configuresoft (now a VMware technology). He has also been the Chief Technology Officer for Baylor College of Medicine (BCM). He holds a doctorate in Computer Science and has held faculty positions in Computational Medicine and Computer Science. Dr. Moreau speaks regularly at IT management and security conferences worldwide.

RSA/EMC recruiters will be present to discuss available internships and full-time positions.

Refreshments will be served.