Copy and paste the embed button to share on your blog, social networks, or website!
Cloud computing sits at the forefront of industry headlines these days. It's a trending computing model that many organizations are being forced to seriously consider if they want to keep up with evolving IT business practices and maintain a competitive edge. But with this new shift towards virtualization technology come a number of concerns to address, particularly around issues of security. Glenn Brunette, Distinguished Engineer and Chief Security Architect, is working on a project that attempts to solve some of the bigger problems around the security of virtualized environments using Immutable Service Containers (ISCs)--an architectural deployment pattern for highly secure service delivery.
Listen to this edition of Innovating@Sun in which Hal Stern, VP Global Systems Engineering, and Brunette discuss ISCs and how building them along principles of stronger security, greater integrity, and simplified security configuration and management is proving to be a very viable solution for organizations looking to safeguard their virtualized environments. Hal and Glenn go on to discuss:
micro-virtualization: how adding a thin management layer between the hypervisor and the service lends reliability to security enforcement and monitoring controls
how "immutable" Immutable Service Containers are
defense in depth measures being taken
current implementations with Solaris and OpenSolaris
what's next for ISCs, including building core concepts into projects such as OpenSolaris on EC2 & the JeOS project; Virtualbox implementations; and integration of autonomic security techniques
Links
Immutable Service Containers Project
OpenSolaris ISC Construction Kit Preview
OpenSolaris on EC2
JeOS Project
Glenn Brunette's Blog
Transcript
Sometimes the best books you read are the ones your friends loan to you. The cover is a little ragged and the pages are dog-eared, evidencing an eager and avid reader who probably spent a few late hours on the couch devouring it. And he wanted you to share it with you so that you, too, could spend your nights tearing through the pages as voraciously as he did. We wanted to do something similar here, and although we don't have a book repository to loan them out to you (because if we did, we totally would because we know you're good for it), what we do have are a few recommendations from the community that you may find worthwhile. If you have a book you'd like to add to the list, join the discussion here.
Andy Paton recommended:
Easy Oracle Jumpstart (Oracle Database Management Concepts and Administration) - A very easy read and had a feeling I would be needing it!
Wayne Horkan wrote:
Here's a few of my favourites off the top of my head...
1) The Mythical Man Month (2nd edition has the essay "no silver bullet") - Fred Brooks
2) Advanced Programming in the UNIX Environment - W. Richard Stevens
3) Computer Architecture (A Quantitative Approach) - John Hennessy and David Patterson
4) Building Scalable Web Sites - Cal Henderson
5) Object Thinking - David West
Wayne adds:
I quite like the 'pull out' section in Donald E. Knuth's "Art of Computer Programming Volume 3: Sorting and Searching" comparing search and sort algorithm efficiency too. And I think anyone familiar with Knuth's work would agree that it would be excellent to see him get to the fabled seventh volume in the next few years (only three volumes to go).
John Stanford suggests:
The Art of Systems Architecting by Mark W. Maier
Feel free to add your faves to the discussion board. This is your opportunity to share with others your sophisticated taste in technology literature and spread the word about your favorite published work. So go ahead, tell us what you think we should read today.
