Skip to main content

Virtualization and Two-factor Authentication

Posted by: admin 15 years, 4 months ago

There's been lots of discussion about cloud risks recently and how to improve cloud security. I want to point out that two-factor authentication will be a key piece of securing the cloud. From improving the security of the tunnel:  

Technology such as two-factor authentication systems, when married to encrypted VPN connections, can secure an internet connection into a cloud computing-based service.

That's the verdict from the Information Systems Audit and Control Association (ISACA), which concludes that using such techniques would tend to make interception of files and transmissions almost impossible.

 

To administrative access and communication between virtual machines:  

"Communicating from one physical server to another can be easily controlled, but in a virtual environment, it is more complex. If I get in as a guest on a virtual machine, then it is much easier to get to others. If I can breach one VM, then I can breach many," he said.

Stronger authentication of users will limit that risk, but as Kilpatrick said, "90% of the world is not using any form of two-factor authentication. Anyone working in a virtual environment without two-factor authentication is a lunatic. If I can get on to the hypervisor and get administrator rights to the whole thing, I have the keys to the farm."

Moreover, you may want to have two different authentication servers for these two needs.  Luckily, WiKID doesn't charge for the server, so there is no additional cost to have more than one server. 

 

 

Current rating: 1

Recent Posts

Archive

2024
2022
2021
2019
2018
2017
2016
2015
2014
2013
2012
2011
2010
2009
2008

Categories

Tags

Authors

Feeds

RSS / Atom