RSA President: Cloud Security is inseparable from virtualization

RSA President Art Coviello said: "Virtualization technology helps to achieve better security and control in the cloud computing environment." ”

Speaking at the RSA Conference, Coviello a bullish argument about cloud security. He argues that some companies are largely skeptical about moving data and apps to the cloud, and that the solution is actually easier than many people think.

"The trust mechanism for cloud services is now in place, and the key is to stop relying on the design of physical infrastructure security controls," Coviello said. Instead, enterprises need to consider using virtualization technology to enhance security, visibility, and management in the cloud environment. ”

Coviello that security needs to be a logical relationship with the information and transactions it protects. In a virtual environment, fixed demand is replaced by the logical need for information and transaction definitions. As a result, security requirements will also be logically structured.

"The It stack is changing," says Coviello. Before us is the logical boundary, not the physical boundary, we can no longer rely on the physical infrastructure to protect itself. Virtual machines are inherently designed to dynamically adjust workloads, where security work requires dynamic control. This means ensuring the security of virtualized components and ensuring that the entire cloud service is secured. ”

Coviello believes that security policies and best practices need to be developed and implemented by the cloud security management system. Emphasis should be placed on those security policies that are more risk-based and adaptable to changes in the environment.

While some companies have misgivings about the security and control of cloud applications, the economic and flexibility associated with cloud computing has been used by a growing number of companies.

"If you use it properly, virtualization can be a shortcut beyond the level of control and visualization in the current physical environment, which seems to be contrary to people's intuition," says Coviello. ”

RSA to promote this security model, the company launched the "RSA Cloud Trust experts" service. The service will leverage VMware's virtualization tools to provide a range of certification management and compliance testing services in cloud computing services.