VMware VMsafe
VMware plans to open its hypervisor to security vendors with a set of APIs that make it easier to protect virtual machines from threats including viruses, Trojans and keyloggers.
Without these APIs, security vendors building antivirus and firewall tools for virtual servers are removed from the hypervisor by several layers and therefore cannot see everything that happens within the virtual environment.
This potentially makes security products less robust than they could be, and creates annoyances for users. For example, a customer might have to install one instance of an antivirus program on each virtual server, rather than let one instance of the program protect all the virtual machines within a physical piece of hardware.
Mware intends to fix that problem with VMsafe, the set of APIs announced.
“Instead of installing and running antivirus on 20 different virtual servers, you just do it once.By giving security vendors more visibility into traffic at the hypervisor level, they will be more likely to catch malware and other types of intrusions before they enter a virtual system, Hochmuth says.
Previously, security software really had no advantage over malware that’s infiltrated a virtualized server, says Parag Patel, vice president of alliances at VMware. The visibility into the hypervisor afforded by the VMsafe APIs gives security software a higher degree of privilege than malware.
The APIs also improve security with more thorough isolation of virtual machines, Patel says.
The 20 vendors developing new security products for use with VMware include Check Point, F5 Networks, IBM, Imperva, McAfee, EMC’s RSA division, Secure Computing, Symantec and Trend Micro. Security products built using VMsafe should be out later this year.
.
.