NEWSLETTERS
 

CIO.com updates, insights and advice on technology, management and your career.

 CIO BlackBerry News and Tips
 CIO Research and Analysis
 CIO Microsoft
 CIO Insider
 
 
 
SUBSCRIBE TO CIO
 

Are you involved in setting the direction for your company's IT budget or strategy?

Apply today for a FREE subscription to CIO Magazine!

» Subscription Services

» Reprints

 

 

Reader Feedback

How Secure is Hyper-V, Really?

 

Given all the talk about Hyper-V, I have some security questions, but so far, not many good answers.

View Article »

READER FEEDBACK

Anonymous Thu, 2008-09-04 04:09

What is this???
It's on my top 3 worst articles for 2008.

Anonymous Thu, 2008-09-04 08:52

You can see from the title of his book that he has an agenda

Mike DiPetrillo Thu, 2008-09-04 10:51

Agenda or no agenda he brings up a good list of questions. These are really questions you should ask any virtualization vendor. Yes, it's a strange "article" but a valid one none-the-less.

Anonymous Fri, 2008-09-05 01:57

I guess if I had a VMware consulting business I would ask the same easy questions that have been answered in blog after blog and presentations on Hyper V. This person just proves the the fact that we need more people that understand what a HyperVisor is then folks that are are run of the mill just hoped on the virtualization bandwagon folks. Do your own technical research how do you know that xen dom 0 is a vm go do the research and stop with the is it really nonsense.

Anonymous Fri, 2008-09-05 09:39

Did you even look into the answers to these questions? There is a ton of material on the architecture of Hyper-V, how it works, and how it relates to the parent partition in terms of security and providing other functionality. I understand this coming from random bloggers, but I'd expect the level on CIO.com to be much higher. This reads like VMware "scare-points" than a real discussion of virtualization issues.

Anonymous Fri, 2008-09-05 09:40

Those "valid points" are called into serious question by his clear dislike for Windows and (by association) Microsoft as well?

Many of the "answers" he bemoans are readily available if he actually cared to seek them out.

Basically, "agenda" comes through loud and clear. ..either that, or "you need a posting this morning and it better be VMWare-favorable!"

Anonymous Fri, 2008-09-05 10:19

How about doing some due diligence before making your CIO.com look like a bunch of hacks for VMware. The answers to all of these questions is on the Microsoft.com Web site. There's this really cool thing called Google that can help you get the answers to the questions you raise. Try it out, it works a treat.

Anonymous Fri, 2008-09-05 12:14

FUD. Pure FUD.

james O'Neill Sat, 2008-09-06 13:54

What is the motivation for someone who is a VMware evangelist to ask these questions of hyper-V ? Edward for your education ...

So why does Hyper-V depend on Windows 2008 Server security?
For Hyper-VMs Windows Provides a pre-existing file system, and a security model for determining which users can manage VM.

What zero-day attacks will cause heart-ache for all adopters? Can they be prevented?We're trying to imagine classes of problem here. One of Hyper-Vs advantages to a business is that it can be managed like any other Windows service, against that is the risk that a exploit which exposes Windows services in general exposes hyper-v. Server-2008 especially core reduces the attack surface of a Hyper-V server by installing only those components that are needed.

And which boots first? If it is Hyper-V, then 2008 should run within a VM, but does it? If Windows 2008 Server crashes or is forced to crash by something malicious, will all the VMs running upon it also come tumbling down?
Windows runs in a partition. Under hyper-V not partitions are equal. The first one - the parent partition - manages the others and provides drivers. Some "crashes" of the parent will not affect the children. A bad Kernel mode driver will take out the whole system - but those are the same drivers that are in the hypervisor with VMware, so the risk to both designs is the same.
Does 2008 act as a management appliance, or is it something more that is essential to the running of Hyper-V? Can it run without it?
Services in 2008 provide support for emulated hardware and provide the underlying file system etc. It's from 2008 that hyper-v gets instructions about what VMs to start. So it can't run without it.
any VM on the bridge can be seen by any other VM. How many bridges is it possible to create?
No limit that I know of. Since only one switch can be bound to a NIC the limit is more likely to be physical NICs in the machine.
Since it is a bridge, and Windows 2008 Server plays a role in bridging, can Windows Server 2008 see every packet as it goes across the bridge?
There are perf counters available from the switch to tell which VMs are creating the traffic, I'm not sure if you can sniff the packets by connecting to the switch, but you should be able to do so by installing the right network monitor driver on the physical NIC card. In its normal state, no 2008 app can get to a VMs network traffic.
You should definitely put one before your Server 2008 instance to protect it from attack. But if Server 2008 participates in all the bridging, how can you protect it from the VMs?
The bridge is only optionally connected to any network stack which terminates inside the OS.
From a storage perspective, can disks that store VMs be encrypted, and can Hyper-V work with these?
Yes. 2008 has bitlocker as standard. It's just storage as far as hyper-v is concerned.
Can VMs be placed on USB storage? What happens when the storage is taken away when a VM is running?
Yes they can. Same thing happens as if you remove any other kind of storage (including unplugging the disk on a physical machine)
How do you handle forensics of a Hyper-V VM? Can they be killed as if you were pulling the plug? Is this hampered by the lack of any ability to migrate live VMs?
Yes there is a power-off button.
You can make a snapshot of a VM which preserves its memory state and disk state, and a shadow copy can be made of a running disk with the standard windows tools. This can be copied for analysis.

Anonymous Sat, 2008-09-06 22:13

Thanks for a completely useless article. It is clear from your itemized list you have an agenda to sell more copies of your worthless book and consulting services. Thanks for wasting 2 minutes of my life. Douche.

Post new comment

The content of this field is kept private and will not be shown publicly.
  • Allowed HTML tags: <a> <em> <strong> <cite> <code> <ul> <ol> <li> <dl> <dt> <dd>
  • Lines and paragraphs break automatically.

 
  PARTNERS       WEBCASTS    
 

Windows 7 Webcast Series

There's a lot of buzz about Windows 7 out there. Each month in our webcast series, listen to analysts and customers discuss how Windows 7 and the Windows Optimized Desktop is impacting large companies around the world. Learn how they evaluated Windows 7, including the cost of deployment, deployment strategies, and tangible benefits.

Sponsored by Microsoft  Listen to on-demand Recordings »

 

Service Level Management Best Practices Life Cycle Overview - Improve Service Levels

Best practices for Service Level Management (SLM) is a process for consistently meeting customer requirements and delivering on IT's promises. See the steps required to ensure high-quality SLM.

Sponsored by Compuware  Read this White Paper »

 

Keeping Your Members Safe from Online Scams and Predators

In order to keep fraudsters out, romance sites must deploy effective solutions that look at information independent of what is supplied by users. A device fingerprinting solution such as iovation ReputationManager™ provides unique insight into the computers being used to create multiple accounts and exposes hidden device-account relationships that identity-based fraud solutions often miss.

Sponsored by iovation  Read this White Paper »

Resource Alerts

Get instant email notifications by topic when white papers, webcasts, and case studies are added to our library.

Resource Alerts

Get instant email notification when white papers, webcasts, and case studies are added to our library. Don't just be up-to-date—be up to the minute with our new Resource Alerts.

Defend Against Blended Threats: What You Need to Know

Blended Web and email threats are becoming increasingly complex and represent a huge...  View Now »

 

Prescriptive Actions to Reduce Risk

In this Webcast, learn best practices for effective systems management in a heterogeneous environment and keep client systems cost under control.   View Now »

 

Webcast- Vantage 11: Redefining Application Performance Management

Compuware's latest release, Vantage 11, is a major advance in end-to-end application performance management--bringing together proactive issue identification, quantification of business impact and problem resolution into a single solution. Tune in to learn how Vantage 11's top-down approach helps you make better decisions and dramatically lower operations costs.  View Now »

Resource Alerts

Get instant email notification when white papers, webcasts, and case studies are added to our library. Don't just be up-to-date—be up to the minute with our new Resource Alerts.

 
 
FEATURED SPONSORS
 
 
 
SPONSORED LINKS
 

Return on Information: Google Enterprise Search pays you back. Get the facts.

VMware. The source for Business Infrastructure Virtualization.

ShoreTel tells businesses to untangle from competitors' complexity and turn to its brilliantly simple UC solution

See how AT&T can help protect your network.

Streamline IT Costs. Boost Performance with WAN Optimization.

Build your 1st app FREE with Force.com

TDWI checklist helps define data readiness for analytics. Download report.

A Clear View Toward Virtualization

Virtualization Technology as a Business Solution

The rules of infrastructure management just changed.

A Clear View Toward Virtualization

Interactive Q&A helps you discover key ways to maximize IT assets.

Ready to virtualize tier one applications? Check your virtualization maturity.

Think you can't afford a Cisco Switch? Cisco Catalyst Switches are now more affordable.

Five minute business analytics assessment. Immediate results.

The Case for Investing in Business Analytics Technology. Read white paper.

Upgrading to VMware vSphere with vWire

Top 10 Lessons Learned for Corporate 3G Mobile Broadband Deployments

CRM Built for IT: The Executive Guide to Selecting CRM that Meets IT Needs

Return on Information: Google Enterprise Search pays you back

ROI of Application Delivery Controllers

Making Consumer Two-Factor Authentication Simple and Cost-Effective

Mining the Cloud to Ease the Enterprise Compliance Burden

Solve Five Key IT Security Challenges with Cloud-Based Authentication

White Paper: Right-Sizing Your Power Infrastructure

AT&T Synaptic Storage as a Service. Expand on demand

Trend Micro ranked #1 against real-world malware. Read more.

Webinar: Jump-start your in-house e-discovery with Ringtail QuickCull from FTI Technology

Top Five CIO Challenges

Read the RSA report: Security for Business Innovation

64-page prescriptive guide to security, compliance, and IT operations.

Increase UPS efficiency without sacrificing protection.

eZine: A Roadmap to Reducing IT Complexity

Reduce risk, gain agility. See how Progress can help your business.

Virtualization Technology as a Business Solution

eZine: A Roadmap to Reducing IT Complexity

World-class trading technology solutions from NYSE Technologies.

If You're Paying for Telecom, You're Paying Too Much. Contact Asentinel Today.

Trade-In your old printer and save up to $1,000 plus free recycling!

infoBOOM! - The Mid-Sized Company CIO's Exclusive Community

Live Webinar: Applying Business Analytics. Click here to learn more

Removing Barriers To Better Server Virtualization Efficiency

4G Revisited. The Continued Evolution of Wireless Mobility.

What's Next for Enterprise Resource Planning?

Maximizing website Return on Information with high-quality search

Gartner Magic Quadrant, Application Delivery Controllers 2009

Authentication as a Service by Forrester Research

Cloud-Based Authentication for Next-Generation Extranets

Cut Costs & Green Your IT Operations with PC Power Management

White Paper: 4 Customer Service Myths

 
CIO MARKETPLACE buy a link
 
Software License control, Windows XP/2000 Upgrades

Use your Intranet to manage Software Licenses, plan for Windows XP/2000 upgrades, do Security Audits and more. Click to try and ask for our white paper - PC Management for the Internet Age.

UNIX and Linux Performance Tuning Simplified

SarCheck is a performance analysis and tuning tool for most UNIX & Linux operating systems. It produces recommendations with full explanations, and both supporting graphs and tables. Get the most from your hardware by keeping your systems tuned.

.NET Developer Wanted - Boston - Local Candidates

AIR provides sophisticated analytical tools and software systems to help companies manage that risk. We are seeking a Sr .NET Developer with 8-10 yrs exp in .Net & OO development. ASP.NET, VB.NET skills required. Annual bonus - Apply Now

Get More from Your Oracle Database

DBAs are constantly challenged to increase performance and keep costs down. This paper discusses the industry best-practice Wait-Event analysis and how Confio has combined this with their Resource Mapping Methodology to optimize DB performance.