Nemertes Research: Practicing Virtual Security
Treating virtual servers simply as very thin physical servers is insufficient as a security policy, as it fails to address the added layers of complexity virtualization creates and the decreased visibility of inter-VM network traffic. To properly secure a virtual environment, IT must layer various security technologies within and outside the virtual environment appropriately, based on careful consideration of the requirements of the systems involved.