Tag Archives: Security
AWS Dedicated Instances, Hypervisor Security, and Multi-tenancy
Most everyone in the blog ecosystem has missed both the point and some of the economics of AWS Dedicated Instances that were recently announced. Folks like The Register focus on how a single virtual instance can cost $109,324 for a year … Continue reading
More on Amazon’s SAS70 Type II
Amazon hasn’t been forthcoming since my last post on their control and control objectives, which is disappointing, but expected. I still believe that transparency here is more important than security through obscurity. Hiding the controls and control objectives doesn’t provide … Continue reading
Why is Amazon’s SAS70 Audit Bogus?
At first glance it seems like Amazon’s recent announcement of a successful SAS70 audit is grounds for celebration[1]. Certainly it has met with fanfare on Twitter and blogs. Unfortunately, a SAS70 audit isn’t what most people think it is. Worse … Continue reading
‘Operators’ and ‘Administrators’
Operating and administrating Internet infrastructure is not the same. For the uninitiated it may seem that ‘operators’ and ‘administrators’ (systems or network) are not different, but there is one important distinction: The primary job of an operator is “risk aversion”, … Continue reading
Can You Trust Cloud Computing?
A thoughtful blog posting from Khoi Vinh asks whether we can trust clouds given the current financial climate. It’s good to be cautious about trusting all of your data to ‘the cloud’, but you should already be evaluating your cloud … Continue reading
CIO Concerns about Cloud Security
There is a little here on CIOupdate about CIO concerns with cloud security. The article is short and a little overblown in how both sides are represented. I’m currently talking to CIOs and CISOs at large enterprises and I’m not … Continue reading
Another take on Web-Scale Computing
Greg Borenstein, principal behind Music for Dozens and out loud thinker sums up the potential long term impact of Amazon’s successful cloud computing model. It’s an insightful article and I think worthy of a close read, including the comments. First … Continue reading
Micro Virtual Machines
Introduction MicroVMs are a technology I was playing with for the first product we considered spinning out, the Virtual Server Room, a sort of virtual appliance micro-cluster in a box made up of back office IT servers. I thought I … Continue reading
Securing Your Data on Amazon’s EC2
As a proof of concept, we’ve released a new Amazon EC2 ‘AMI’ (ami-34ba5f5d) that uses filesystem encryption (dm-crypt) for the ‘ephemeral store’. This image is available to the general public and we hope you get some good use from it. … Continue reading
