2011 Speaker List

A significant issue for enterprises moving to private or public clouds is how to trust their provider and its infrastructure with their sensitive workloads. Customers need the ability to assess security standards, trust security implementations, and prove infrastructure compliance to auditors. For business decision managers, considering private clouds that leverage the cost efficiency of virtualization to increase the quality of service to the business is paramount. This session will describe technologies and capabilities that provide reporting on the configuration of the virtual infrastructure used by the customer VMs and tie this to a verifiable measurement of trust in the hardware and hypervisor. This allows customers to be sure the provider is following security best practices, can pass a regulatory audit, and be assured that the provider’s platforms are booting from a secure root of trust, protected from root-kits and other malware. We will describe the hardware and software methods by which these measurements, configuration of the virtual infrastructure, and events reported by the infrastructure are used to generate dynamic and detailed compliance reports that can be used by service providers, auditors, and customers.

The panel session will tackle the topic of Private vs. Public Clouds. The panelists will provide insights into the differing challenges of securely deploying and managing applications and workloads into these cloud architectures as well as the unique security obstacles associated with migrating to, from and across Private and Public Clouds. We will take questions from the audience and will provide opinions and guidance for addressing the risks and stumbling blocks.