Former Citrix Technology director: Virtualization will solve cloud computing security issues

[Guided by] while it stores and suppliers are trying to provide security for virtualized systems, a new company called Bromium says it will take the opposite approach-making virtualization technology secure for devices.

While it stores and suppliers are trying to provide security for virtualized systems, a new company called Bromium says it will take the opposite approach-making virtualization technology secure for devices.

System Management programs can isolate and protect applications and change the virtualization platform into security tools. Security virtualization System The war is beginning to smoke.

Previously, Crosby served as the technical director of Citrix and the virtualization maker XenSource (Citrix acquired in 2007). Crosby also studied "distributed autonomic computing, platform security, and reliability" at Intel leadership. At the same time, Crosby is an active participant in open source projects such as xen.org and OpenStack.

Jumping from a company with a diversified portfolio to a brand new company, Crosby admits that the stakes are entirely on risky technologies and that he is likely to suffer catastrophic failure. However, he believes that he will be rewarded handsomely if he succeeds.

If we can overcome this big problem, then the benefits of virtualization, first of all, is to improve security, which is more important than any other benefit.

Crosby's partner, currently Bromium CEO Guarav Banga, has served as the Phoenix Technologies Technical director and senior Vice president, and the senior vice president of Ian Pratt's production section, Former chairman of Xen.org, XenSource co-founder.

Bromium's employees are about to reach 15. "We are a highly skilled team" and we will recruit more software engineers, Crosby said. Crosby the right time to choose to leave the Citrix,bromium company to get a 9.2 million dollar investment from Andreessen Horowitz, ignition partner and Lightspeed three.

Bromium Company's products will not be available until next year, and now, Crosby can only outline the company's current technical direction. Virtualization has so far been used to reduce hardware costs and improve the efficiency of data centers, but Crosby and his team have shown that system management program load isolation capabilities can be applied to the security realm. Crosby says the technology goes well beyond the traditional sandbox approach, and the System Management program becomes the only program that can control the execution of code.

The Bromium Company's technology limits all I/O operations and system resources to a "narrow API"-that part of the code interacts with the outer layer through this narrow API, so the design guarantees high security.

Bromium Company is based on system Management program security products about 10,000 lines of code, rather than millions of lines of code like Windows systems, Crosby points out. The system is not going to be able to add a blacklist to the program, but to do so without allowing any unauthorized applications.

"We don't think any code is trustworthy. All code can launch an attack, "Crosby said. "And all you can do is control the implementation of the code." We reshape the trust boundaries of our code through virtualization technology. ”

Bromium attempts to reduce the credibility of the process from a mathematical perspective, through a number of calculations to determine whether the code is from a malicious attacker or a legitimate source program.

Crosby said the technology was primarily for server providers, not users, and he promised that the technology would work for any type of system, including mobile platforms, Windows living on Mac desktops, and cloud service platforms.

However, the success of this technology depends on its ability to differentiate between attack code and secure code, as well as cross-platform capabilities. Bromium Manager's background is well known, we can easily speculate that the company's system management program is also based on open source Xen. But Crosby said the company was not confirmed. By adapting this technology to any system management program, he says, Bromium's performance on the virtualization products of Citrix's competitor VMware depends on the cooperation with VMware.

Crosby left Citrix at a high level. IDC's Analytics report lists only the leaders of the desktop virtualization market. Amazon EC2 is based on at least one of the Rackspace cloud computing services used by Citrix XenServer and Open source Xen (Citrix does not make a profit).

Citrix is lost to the majority of vmware,1000 in the Enterprise Server virtualization market by VMware users. But Crosby's success in the public cloud market has dwarfed VMware's efforts in corporate private cloud.

When Citrix buys XenSource, "I think we face this VMware rivalry in terms of enterprise virtualization." "Crosby said. Now, our goal is to use virtualization technology to build public cloud services for enterprise users.

"The public cloud model is growing faster than the private cloud model," Crosby points out. "We create these massive clouds, like the Rackspace Cloud, and try to find the cost of reducing the infrastructure." ”（

Original source from "Bit net", reprint please keep the original link: http://cloud.chinabyte.com/291/12115291.shtml

(Responsible editor: admin)