Fortify Predicts VMware Mega-patch Move will be First of Many

Many Conventional IT Security Applications do not Fully Protect Virtual Server Users

(09.09.08) - Fortify Software, specialists in enterprise application security, says that VMware's release of a raft of patches this week - referred to many as a mega-patch - is likely to be the first of many such moves as hacker interest in the virtual environment takes off. "With the dramatic fall in processor prices over the last 12 months and the amplifying effects of the credit crunch, many companies are reviewing their IT resources and concluding that virtual servers are a highly cost-effective and business-efficient way to go," said Rob Rachwald, Fortify's director of product marketing.

"A typical major business may find that VMware gives them access to, say, 16 virtual servers when they only have 12 physical servers. This is a real cost-saver and also allows companies to start taking out more innovative software licences as well," he added.

According to Rachwald, this is why some many major organisations, including educational campuses, are going down the virtual server route.

The only issue that clouds the horizon, however, says Rachwald, is that many conventional IT security applications do not fully protect virtual server users.

"It's a whole new security ballgame, which is why we urge anyone contemplating migrating over to the benefits of a virtual server system to review their IT security systems. It's also one of the reasons why we predict that virtual server patches will become commonplace in the months ahead," he explained.

For more on VMware's mega-patch update: http://tinyurl.com/6dy5ar

(Fortify: ma)