Full Virtualization Technologies: Guidelines for Secure Implementation and Management

Published

April 25, 2011

Author(s)

Shirley M. Radack

Abstract

This bulletin summarizes the information presented in NIST SP 800-125, Guide To Security for Full Virtualization Technologies: Recommendations of the National Institute of Standards and Technology, which was written by Karen Scarfone of G2, Inc., Murugiah Souppaya of NIST, and Paul Hoffman of the VPN Consortium. The guide discusses virtualization technology, a technique for simulating the software and the hardware upon which other software runs. Organizations adopting virtualization technologies can operate their information systems more efficiently, reduce their energy, operations and maintenance costs, and spend less on hardware and space for hardware. The bulletin includes information about the forms of virtualization, how virtualization contributes to operational efficiency, the security issues that need to be addressed by organizations adopting virtualization systems, and NIST’s recommendations for the secure implementation of virtualization. The bulletin provides information about resources that are available to support organizations in their deployment of virtualization.

Citation

ITL Bulletin -

NIST Pub Series

ITL Bulletin

Pub Type

NIST Pubs

Download Paper

Local Download

Keywords

desktop computers, full virtualization, guest operating systems, hardware, hypervisor, information security, information systems security, operating systems, risks, security management, security threats, servers, system development life cycle, system software, system vulnerabilities, virtual machine, virtualization

Citation

Radack, S. (2011), Full Virtualization Technologies: Guidelines for Secure Implementation and Management, ITL Bulletin, National Institute of Standards and Technology, Gaithersburg, MD, [online], https://tsapps.nist.gov/publication/get_pdf.cfm?pub_id=908456 (Accessed December 26, 2024)