| SecureCloud |
| Trend Micro Launches Encryption For The Cloud
Information Management Online, By Mel Duvall, Wed, 1 Sep 2010, 245 words
Trend Micro has made a public beta available of a new encryption solution for cloud computing, which offers the promise of providing enterprises with a secure method to transmit data via the cloud. |
| |
| |
| Trend Micro introduces SecureCloud
CBR Online, By Staff, Wed, 1 Sep 2010, 161 words
Trend Micro, a provider of Internet content security offerings, has introduced the SecureCloud to provide enterprises with a multi-layered protection to data residing in the private or public cloud. |
| VMWorld 2010: Security Products Roundup
CRN, By Stefanie Hoffman, CRN, Wed, 1 Sep 2010, 352 words
From executive keynotes to intimate sessions, the security of the cloud and virtual environments was one of the most discussed top-of-mind subjects at the 2010 VMWorld Conference. That security focus was further evidenced by an array of security partnerships and product launches announced during the first full day of the conference. Here are a few of the virtual releases. |
| |
| |
| Trend Micro brings encryption to the cloud
IDG News Service, By Ellen Messmer, Network World, Tue, 31 Aug 2010, 268 words
Trend Micro is blazing a new trail with a service called SecureCloud intended to give enterprises a way to encrypt data in cloud-computing environments.
Editorial Comments: The story has also been posted to SFGate and CIO. |
| Trend Micro Brings Security to the Cloud
CTO Edge, By Mike Vizard, Tue, 31 Aug 2010, 208 words
As more applications move into the cloud, it's only natural that security would follow suit. Trend Micro today announced that it is making a beta version of a new Trend Micro Secure Cloud offering available now. |
| 5 Resources for Migrating to the Cloud Securely
ReadWriteEnterprise, By Klint Finley, Tue, 31 Aug 2010, 459 words
This post is part of our ReadWriteEnterprise channel, which is a resource and guide for IT managers and technologists in the Enterprise. The channel is sponsored by Intel. As you're exploring solutions for your enterprise, check out this helpful resource from our sponsors: All New 2010 Intel Core vPro Processors and Microsoft Office 2010: Your Best Choice for Business PCs |
| |
| Top Security at VMworld
Computerworld: Security Impact, By Erica Ogren, Fri, 3 Sep 2010, 445 words
The evil effects of the red-eye on my 6'3" body are now gone so it is time to unveil the security that was most impressive at VMworld 2010. While security concerns are an ever present theme of businesses planning on evolutions to private and public cloud services, most of the security vendors try to catch the virtualization wave with architectures designed for the physical world. However, there were noteworthy cases of innovative security that can be applied to virtual and physical environments that captured my "Top Security in Show" awards: |
| |
|
|
| Deep Security 7.5 |
| Deep Cloud Security
Virtual Strategy Magazine, By Carryl Roy, Fri, 3 Sep 2010, 114 words
VSM speaks with Todd Thiemann, Senior Director, Datacenter Security at Trend Micro, about cloud security with Deep Security 7.5 and SecureCloud. |
| Trend Micro Can Handle Your Security Problems Much Better
Live Wire 2.0, By Staff, Tue, 31 Aug 2010, 950 words
Trend Micro's new Deep Security 7.5 is able to detect malicious hackers and virtual machines without agents – into small pieces, and the light of the traditional security software and utilities for monitoring nuclear power plants they operate. The company has also opened a Secure Cloud as a public beta. |
| Trend Micro announces Deep Security 7.5
Help Net Security, By Staff, Tue, 31 Aug 2010, 177 words
Trend Micro announced the latest version of its security software that protects operating systems, applications and data on physical, virtual and cloud servers, and virtual desktops. |
| Trend Micro Announces Trend Micro Deep Security 7.5: New Agentless Anti-Malware Module For VMware Environments Provides Unprecedented Security, Manageability And Performance For Dynamic Datacenters (press release)
Business Solutions, By Trend Micro, Fri, 3 Sep 2010, 664 words
Recently at VMworld 2010, Trend Micro announced the latest version of its advanced security software that protects operating systems, applications and data on physical, virtual and cloud servers, and virtual desktops. Trend Micro Deep Security 7.5, which leverages the latest VMware vShield Endpoint API, now comes with a new agentless anti-malware module that adds to the product's existing toolkit of protections including: intrusion detection and prevention, web application protection, application control, stateful firewall, integrity monitoring and log inspection. |
| Trend Micro Adds Enhanced Host Security & New Cloud Encryption
Network Computing, Posted by Neil Roiter, Tue, 31 Aug 2010, 638 words
Trend Micro is adding an anti-malware module to its host-based security product, now Deep Security 7.5, the host-based intrusion prevention product from the acquisition of Third Brigade last year. They are also introducing SecureCloud, a hosted encryption service for protecting data in the cloud. The anti-malware capability protects individual virtual machines at the hypervisor level, eliminating the need for managing agents on each client VM. SecureCloud encrypts data to and from Infrastructure as a Service cloud improving security and compliance requirements. |
| Trend Micro Handles VM Security Sans Agents
TechNewsWorld, By Richard Adhikari, TechNewsWorld, Tue, 31 Aug 2010, 987 words
Trend Micro's new Deep Security 7.5 is able to detect malware and intrusions in virtual machines without the use of agents -- the tiny pieces of lightweight software traditional security and monitoring utilities plant within the utilities they're operating. The company has also opened its SecureCloud as a public beta. |
| Trend Micro Targets Virtualization, Cloud Security
eWeek, By Brian Prince, Tue, 31 Aug 2010, 399 words
Trend Micro is moving ahead with its virtualization and cloud security strategy with new anti-malware technology for virtual environments and encryption key management for the cloud. |
| |
| |
| |
| Trend Micro Gets Virtualization Update/Public Cloud Security
The VAR Guy, By Matthew Weinberger, Tue, 31 Aug 2010, 326 words
Trend Micro today announces two new solutions designed to give channel partners a security boost in virtualized and cloud environments: Deep Security 7.5, an update that brings agentless anti-malware to VMware environments; and SecureCloud, a first-of-its-kind public cloud data protection solution, the company claims. Here's the scoop. |
| |
|
|
| Full Text |
| |
| Trend Micro has made a public beta available of a new encryption solution for cloud computing, which offers the promise of providing enterprises with a secure method to transmit data via the cloud. Trend Micro, which launched the offering earlier this week at the VMWorld conference in San Francisco, says the SecureCloud service allows enterprises to encrypt data in a private cloud within the enterprise data center, via a public cloud managed by third-party services, or a hybrid cloud that combines private and public infrastructures.
"Security has been one of the greatest inhibitors to cloud-computing adoption," Steve Quane, chief product officer for Cupertino, Calif.-based Trend Micro, said in a statement. "Now, as cloud computing takes shape and enterprises are starting to put data in the cloud, security must evolve to protect and control the data."
Trend Micro noted that research firm IDC conducted a survey of 263 IT executives to gauge their interest in the use of cloud services. Security ranked first as the greatest challenge attributed to adopting cloud computing.
SecureCloud gives users exclusive custody over their encryption keys, compared to options which might allow shared custody. Trend Micro said this approach provides a "separation of duties," allowing cloud customers to maintain authority over the information.
SecureCloud in now in beta with general availability expected by year end. The service is provided through a Web site portal and supports Amazon EC2, Eucalyptus, and the VMware platform.
http://www.information-management.com/news/Trend-Micro-cloud-computing-security-10018636-1.html |
| Back to top |
| |
| |
| Trend Micro has launched a public beta version of its SecureCloud security platform to enable enterprises to encrypt and control data in public, private or hybrid cloud environments. The company said that SecureCloud integrates unique policy-based key management, industry-standard encryption and virtual-server authentication to safely and easily deploy data into private or public cloud environments. This enables cloud users to secure sensitive information without having to install a complex secure file infrastructure.
One benefit, according to Trend Micro, is that it can deliver services in a private cloud that reside in the enterprise data centre, a public cloud outside the enterprise managed by third-party service providers or a hybrid cloud that combines private and public clouds.
It also said that SecureCloud gives users exclusive custody over their encryption keys, to allow cloud customers to leverage the efficiencies and benefits of cloud services, while maintaining authority over the information within their environments.
In terms of security, Trend Micro said that SecureCloud enhances an already broad solution line-up for cloud security, but is specific to the security and governance of data stored and used in private or public clouds.
Its Deep Security technology can provide a secure container into which customers can put their applications and manipulate their data. SecureCloud encrypts and controls data stored outside the container so that only its encryption key owners can access it.
SecureCloud is delivered as Software-as-a-Service and supports Amazon EC2, Eucalyptus or the VMware platform.
Parag Patel, vice president of global strategic alliances at VMware, said: "Trend Micro has been working alongside VMware to help ensure that SecureCloud provides support for the latest VMware vCloud API so customers can continue on their cloud computing journey. SecureCloud's identity and integrity checking provides a solution for those looking to deploy their own private clouds while helping to ensure compliance and separation of data."
Steve Quane, chief product officer at Trend Micro, said: "Security has been one of the greatest inhibitors to cloud-computing adoption. Now, as cloud computing takes shape and enterprises are starting to put data in the cloud, security must evolve to protect and control the data.
"Enterprises want assurance that their data and applications are secure before they move critical processes into the cloud. Trend Micro SecureCloud gives confidence to enterprises, who can rest assured that that their data is secure and fully within their control."
http://www.scmagazineuk.com/trend-micro-launches-securecloud-security-platform-to-offer-control-and-encryption-of-public-private-or-hybrid-clouds/article/178185/ |
| Back to top |
| |
| |
| Trend Micro has launched the public beta of a new cloud encryption product, claiming an industry first in the process. SecureCloud provides users with sole control over the encryption keys, meaning they decide when and where these keys are deployed.
This allows for what Trend Micro has labeled "separation of duties," giving customers the ability to get the benefits of cloud computing while keeping authority over their data.
Rik Ferguson, told IT PRO this is the first product on the market that hands over cloud encryption to the customer in this way.
"Without control you don't have security – that's a given," Ferguson said.
"We need to make sure we offer technologies to businesses that allow them to retain control of their data, because when you take on board a cloud service provider you will, by definition, outsource a lot of control. But you can't outsource accountability."
The beta is available now and the product, which supports the Amazon EC2, Eucalyptus and VMware platforms, is expected to be released generally in the fourth quarter of 2010.
Trend Micro is looking to expand the encryption offering to a wider array of cloud environments, Ferguson said.
The solution, which combines industry-standard encryption and virtual-server authentication, can be used for private, public or hybrid cloud environments.
SecureCloud can also be placed alongside other Trend Micro protection products to maintain corporate security policy in the cloud, rather than the "lowest common denominator" service providers will supply, Ferguson added.
"Enterprises want assurance that their data and applications are secure before they move critical processes into the cloud," said Steve Quane, chief product officer of Trend Micro.
"Trend Micro SecureCloud gives confidence to enterprises, who can rest assured that their data is secure and fully within their control."
http://www.itpro.co.uk/626551/trend-micro-launches-industry-first-cloud-encryption |
| Back to top |
| |
| |
| Trend Micro, a provider of Internet content security offerings, has introduced the SecureCloud to provide enterprises with a multi-layered protection to data residing in the private or public cloud. The SecureCloud integrates patent-pending management technology, with standard encryption and virtual-server authentication, to enable enterprises control data stored in a private cloud that resides in the enterprise datacenter, a public cloud outside the enterprise managed by third-party service providers, or a hybrid cloud that combines private and public clouds.
In addition, SecureCloud allows users custody over their encryption keys, which allows cloud customers to leverage the benefits of cloud services while maintaining control over the information within their environments.
The company said that the SecureCloud can complement and work with its Deep Security, which provides a secure container into which customers can put their applications and manipulate their data, while SecureCloud encrypts and controls data stored outside the container so that only its encryption key owners can access it.
http://security.cbronline.com/news/trend-micro-introduces-securecloud_010910 |
| Back to top |
| |
| |
| From executive keynotes to intimate sessions, the security of the cloud and virtual environments was one of the most discussed top-of-mind subjects at the 2010 VMWorld Conference. That security focus was further evidenced by an array of security partnerships and product launches announced during the first full day of the conference. Here are a few of the virtual releases. Trend Micro SecureCloud
Trend Micro had not one but two product launches in the virtual space Tuesday. The Tokyo-based company released the public beta version of SecureCloud, designed to protect and secure cloud data. Specifically, the SecureCloud product encrypts sensitive information stored in the cloud, only allowing access to the cloud customer -- not the provider. Cloud customers can subsequently access and manage their own cloud data with a management key technology.
The SecureCloud product can be applied to both public and private clouds as well as hybrid environments, although the product especially alleviates concerns when data housed by a third party provider that also hosts data from multiple vendors.
The SecureCloud offering also aims at eliminating compliance and data privacy risks associated with storing sensitive data in a cloud environment.
The solution is delivered through the channel, and channel partners can add deployment and education services around the product. SecureCloud beta supports Amazon (NSDQ:AMZN) EC2, Eucalyptus, or VMWare vCloud Cloud infrastructure, and can be accessed immediately at www.securelcoud.com.
In addition, Trend Micro also released the latest Deep Security 7.5, which secures operating systems, applications and data on physical, virtual and cloud servers and protects them from malware attacks and other security threats.
The latest Deep Security product, which uses VMware vShield Endpoint API, was tweaked with an anti-malware feature, which was added to the existing deep packet inspection, intrusion detection and prevention, Web application protection, application control, firewall, integrity monitoring and log inspection capabilities.
Deep Security 7.5 can be implemented to virtual, physical and hybrid environments. And like other cloud-oriented security solutions, is designed to help customers sporting virtual and cloud environments to pass mandatory compliance audits required by PCI, FISMA and HIPAA.
http://www.crn.com/news/security/227200091/vmworld-2010-security-products-roundup.htm;jsessionid=om0TfV3HeOqWYCK7LLdqKA**.ecappj01 |
| Back to top |
| |
| |
| Trend Micro recently introduced two new products. "Part one of the announcement -- which was made in conjunction with the VMworld 2010 conference running this week in San Francisco -- is Trend Micro Deep Security 7.5, which leverages the latest VMware vShield Endpoint API and now includes an agent-less anti-malware module," writes eWeek's Brian Prince.
"In addition to Deep Security, Trend Micro also announced a beta release of SecureCloud, a hosted key management and data encryption service designed to give enterprises more control over data stored in public, private or hybrid clouds," Prince writes.
Click here to read the eWeek article.
http://www.esecurityplanet.com/headlines/article.php/3901471/article.htm |
| Back to top |
| |
| |
| Antivirus and network security vendor Trend Micro has made a new product available in public beta. SecureCloud is a "policy-based key management" and encryption Software as a Service (SaaS) offering that can manage the all-important secret keys that are needed to connect to virtual servers on public clouds. Trend Micro says the product works across many different cloud environments and can properly manage encrypted traffic to and from cloud services to satisfy regulatory concerns, as well. That's no surprise; assuming this is a sort of Web-based repository for key information and cloud access credentials, it could probably also manage your VPN routers.
Unique in the cloud security space, this service appears to be actually about managing necessary security functions in the cloud, not some generic nonsense about certifying your application with a meaningless "cloud-ready" rubber stamp or doing antivirus and single sign-on in a slightly different way. Even if the service turns out to be terrible, SearchCloudComputing.com applauds the effort.
http://searchcloudcomputing.techtarget.com/news/article/0,289142,sid201_gci1519537,00.html |
| Back to top |
| |
| |
| Trend Micro is blazing a new trail with a service called SecureCloud intended to give enterprises a way to encrypt data in cloud-computing environments. SecureCloud allows you to maintain control over the encryption key used to secure data stored in the Amazon EC2, Eucalyptus or VMware vCloud cloud infrastructures. Other cloud-computing variants could be added in the future.
"IT operations may be firing up [a remote virtual machine] image but we have security validating the integrity, and it's encrypted until it hits the cloud, and it's encrypting data at rest," according to Todd Thiemann, senior director of data center security and marketing at Trend Micro.
He notes that SecureCloud allows the IT department using either public or private cloud-computing services to answer the basic questions, "Is this image OK? And is it mine?"
Greatest Tech Arguments: Public vs. Private Cloud
Now in beta with general availability expected by year end, SecureCloud is provided through a Web site portal and makes use of policy-based encryption to allow access to a virtual-machine image as well as storing related activity logs.
In addition to offering the security service, Trend Micro is looking at making comparable software available to companies for on-premises use.
In a separate announcement, Trend Micro also unveiled an antimalware protection module for its VMware server security software, Deep Security 7.5. It includes integrity monitoring, log inspection and stateful firewall capabilities, and leverages the most recent VMware vShield Endpoint APIs. Trend Micro Deep Security 7.5 is expected to ship in October.
Read more about data center in Network World's Data Center section.
http://news.idg.no/cw/art.cfm?id=C8E06E6F-1A64-67EA-E404248494B2B0B4 |
| Back to top |
| |
| |
| As more applications move into the cloud, it's only natural that security would follow suit. Trend Micro today announced that it is making a beta version of a new Trend Micro Secure Cloud offering available now. According to Todd Thiemann, senior director of data center security marketing, Trend Micro Secure Cloud will allow IT organizations to deploy a malware protection solution on top of either a private or public cloud infrastructure. The new offering, he said, has been written from the ground up to provide a consistent approach to malware protection using a common set of policies.
What makes the Trend Micro approach unique, said Thiemann, is that it allows customers to manage encryption keys down to individual files, which Thiemann says should start to alleviate many of the security concerns associated with cloud computing. Trend Micro Secure Cloud, scheduled to be available in the fourth quarter, supports Amazon EC2, Eucalyptus and VMware vCloud enviornments 
Trend Micro this week at the VMworld 2010 conference also released version 7.5 of Trend Micro Deep Security, which adds support for the VMware vSheld API. This new API means that customers no longer need to deploy dedicated agent software to integrate VMware systems with Trend Micro security offerings.
http://www.ctoedge.com/content/trend-micro-brings-security-cloud
|
| Back to top |
| |
| |
| This post is part of our ReadWriteEnterprise channel, which is a resource and guide for IT managers and technologists in the Enterprise. The channel is sponsored by Intel. As you're exploring solutions for your enterprise, check out this helpful resource from our sponsors: All New 2010 Intel Core vPro Processors and Microsoft Office 2010: Your Best Choice for Business PCs Safe cloud A recent poll found that most enterprises that have already become infrastructure-as-a-service customers worry much less about cloud security than companies that are only thinking about making the leap. But for the rest of you, security remains the number one concern when considering the cloud. If you're under pressure to take advantage of the benefits of cloud computing, but need to ensure a high level of security, here are a few companies with products and services that can help you make the move without losing sleep. Trend Micro SecureCloud 
Trend Micro announced the public beta of its new SecureCloud SaaS today. SecureCloud enables you to store encrypted data in the cloud while controlling your own keys using Trend's key-management technology. The advantage here are that customers, not the providers, own their own keys without the need to create a complex secure file infrastructure. SecureCloud is currently offered only as an SaaS, but Trend promises an on-premise solution soon.
Trend has also released today a new version of its Deep Security product, a clientless security system for both physical and virtual servers.
EnStratus
EnStratus Manager
EnSTratus offers enterprise cloud encryption, key management, a user management for the cloud, and many other solutions. EnSTratus works by separating the roles of infrastructure provider from the role of security provider. EnSTratus holds encryption keys and manages user access from its own SaaS solution, shielding data housed in the public cloud from unauthorized access. ReadWriteCloud's coverage of EnStratus is here.
Nasuni
For those only needing storage and looking for a simple, solution Nasuni takes a different approach with its on-site/cloud hybrid product Nasuni Filer. The company setups up a NAS-like local device that caches data from its encrypted cloud storage for faster performance. Nasuni has multiple cloud hosting providers, including Amazon Simple Storage Service and RackSpace.
Irdeto
Irdeto, which started out as a DRM company, is paying a lot of attention to the cloud computing. For enterprises that just need to control user access, Irdeto's Cloakware manages privledged account passwords, both in the cloud or in your enterprise.
Fortify
Fortify, the software testing company recently acquired by HP, works with companies to ensure that applications developed for private data-centers are cloud-ready.
How Do You Secure Your Cloud
Have you worked with any of the vendors mentioned in this article, or are you using other solutions? Let us know!
http://www.readwriteweb.com/enterprise/2010/08/encrypt-your-cloud-storage-wit.php
|
| Back to top |
| |
| |
| Selected press press pickup. Business Insider Clusterstock CIO Cloud Computing Journal Document Imaging Report Forbes.com IndianWeb2 Newsodrome RedOrbit Sacramento Bee Web Security Journal USA TODAY |
| Back to top |
|
|
| |
| The evil effects of the red-eye on my 6'3" body are now gone so it is time to unveil the security that was most impressive at VMworld 2010. While security concerns are an ever present theme of businesses planning on evolutions to private and public cloud services, most of the security vendors try to catch the virtualization wave with architectures designed for the physical world. However, there were noteworthy cases of innovative security that can be applied to virtual and physical environments that captured my "Top Security in Show" awards: * Top Security in Show: Trend Micro really knocked it out of the park with their enhancements to anti-malware and data protection for hybrid clouds! Moving signature file processing outside of individual VMs and including VM components in their white-list check allows VDI customers to increase server density without sacrificing anti-malware security, and their encryption in the cloud may prove to be an attractive way to deliver desktops. Even better is that these features have attractive values for farms of physical desktops as well. While their competitors talk about virtualization, Trend Micro is leading the way with product.
* Second: Intel, RSA, and Terremark demonstrated use of Intel's Active Management Technology (AMT) in a real world scenario featuring security as an enabler of enhanced business services. Shown was the Terremark service provider reaching out through AMT to wake up the endpoint, authenticate the endpoint as a customer device (RSA key management) and validate the compliance of its software configuration. Potentially, the SP could enhance bandwidth utilization by scheduling PC maintenance tasks in off-hours, identify the device as a customer and check SLA terms, download patches or a refreshed VM, and upload regulated data for backup and retention. Cool stuff and gets my #2 spot for potential.
* Third: HyTrust, not generally regarded as a security vendor, HyTrust effectively federates identities to enable service providers to offer multi-tenant virtual data centers, and enterprises to disperse their infrastructure across multiple cloud vendors. HyTrust manages privileged user operations within a dynamic virtual data center. It's new security features allow SPs to ensure that customers can only manage their systems and data, and that the customer name is not disclosed when using SSO to bridge to other cloud services. It is pretty clever, and advances the manageability of IT in the cloud.
* Honorable mention: Check Point, Shavlik. Check Point featured its Secure Gateway Virtual Edition and also has a secure remote access play with Abra to enhance hybrid cloud security; Shavlik was applying software configuration management to gold images and VMs to simplify vulnerability management in a virtual environment. Both companies get two thumbs up.
http://blogs.computerworld.com/16884/top_security_at_vmworld |
| Back to top |
|
|
| |
| VSM speaks with Todd Thiemann, Senior Director, Datacenter Security at Trend Micro, about cloud security with Deep Security 7.5 and SecureCloud. Podcast Summary:
Length: 11:04
* Introduction – Todd Thiemann, Senior Director, Datacenter Security, Trend Micro
* Today two significant and complimentary announcements - Deep Security 7.5 and SecureCloud - details (:22)
* How they empower physical, virtual and cloud environments to be "self-defending" (3:24)
* The biggest advantage to SecureCloud giving encryption key control to the user (4:36)
* How these products compare to other offerings on the market today (7:06)
* When these products will be available and at what price point (9:18)
* Close
Podcast: http://www.virtual-strategy.com/VSM-Podcasts/20100903-TrendMicro.html |
| Back to top |
|
|
| |
| Trend Micro's new Deep Security 7.5 is able to detect malicious hackers and virtual machines without agents – into small pieces, and the light of the traditional security software and utilities for monitoring nuclear power plants they operate. The company has also opened a Secure Cloud as a public beta. Trend Micro (Nasdaq: TMIC) announced on Tuesday, less agent antimalware module VMware (NYSE: VMW), the virtual environment of the Deep Security 7.5 product.
The company also announced Tuesday that it throws open the Trend Micro Secure Cloud beta to the public.
Both products of data protection in virtual environments and cloud.
Get Lost-007
Deep Security 7.5 combines antimalware agent less with less intrusion detection agent and agent-less Web application protection.
Traditionally, security, surveillance and other applications to view the data processing environment, plant a small agent – a bit of software – the apps they see. This will send back reports to monitor the status of IT-app console. However, subjects consuming I / O (input / output), and network resources, and although each agent may be light, so they can slow down the system considerably. Migration in recent years has been towards the agent less monitoring.
Deep Security 7.5 is integrated with the latest VMware vShield Endpoint VMsafe API and API. This enables rapid installation of VMware ESX server virtual machine.
A virtual appliance is packaged in a virtual machine hypervisor running. Less Agent virtual appliance Deep Security 7.5 is the first of its kind in antimalware protection, "said VMware executive Harish Agastya.
Agent Less antimalware capabilities Deep Security 7.5 can monitor virtual and physical environment and the cloud.
Smershing through security problems
Less Security Agent appears to offer several advantages for companies.
"Cloning a virtual machine is one of the great benefits of virtualization – it allows you to quickly come up to a new machine in minutes instead of weeks, you'll need to provision a physical server," Agastya said Tech News World. "However, there was no possibility to automatically provision virtual machines on a security at a time, usually in the order you have the right level of security after the virtual machine will be displayed."
This creates a time interval, which leads to lack of security. When the virtual appliance approach to eliminate these shortcomings, Agastya indicated.
Another major attraction of virtual machines (VM), the fact that the VM can be put away until you need them again. This again leads to the security problem – the Security Agent is a VM is obsolete, Agastya said. A virtual device is always up to date, then shouted VM storage is automatically the latest protection.
Again, the possibility of problems with the safety of VMS security brownout occurs. This occurs when a security operation under way at the same time a number of VM compete for the same physical server resources, such as input, and memory, Agastya said.
"We serialize and differentiation activities of a virtual device as it serves the entire system for scanning a single virtual machine after another," Agastya said.
The device also saves a physical server resources when it comes to antimalware update the latest attacks to deal with. "We do not need updates for each model of the virtual machine any more, not only do we model updates the virtual device and are applied to each virtual machine" Agastya said.
Get Hands-On with Secure Cloud
Trend Micro also opened its public beta Secure Cloud on Tuesday. Beta previously available only on early tech adopter.
"We're saying:" Come play with the thing and tell us it's better than a batter "Todd Thiemann, Trend Micro's senior director of Data Security, told Tech News World.
Secure Cloud uses a patented technology that combines policy, based on key management, industry-standard encryption and virtual-server authentication to send information to the public or private cloud environments.
This will allow cloud users secure sensitive data without having to install files in a secure complex infrastructure. Users can select and manage their own security solution because they can select which store encryption keys.
A little distance is a good thing
Secure Cloud Management distinguish key encryption and decryption. Users can either get the leadership of a service, or they can put the data management module to the center of the reservation server and manage the keys of their cloud servers within the data center, "said Thiemann. Traditionally, encryption keys are stored on the server, a security vendor or a cloud vendor payment.
This separation of leadership from the encryption gives users the portability of cloud providers, Thiemann said.
"You can move with the safety of apps," he explained. "In addition, you are not dependent on the cloud service provider security architecture."
Separation of encryption keys could also come in handy IT Audit Thiemann said.
"When you audit, you can reduce the scope of the audit – they have only to verify your key management policies," Thiemann says.
In addition, the separation allows for separation of duties as one of the basic concepts of security. Separation of duties creates a system of checks and balances, perhaps the easiest example is seen as the company's accounting department, where the billing and payments are made in the various departments.
"When the application owner wants to fire up the cloud server, you can set the IT department, those who man the security, for example," Thiemann said.
Trend Micro aims to make the agent less antimalware ability Citrix (Nasdaq: CTXS), Agastya said. Microsoft (Nasdaq: MSFT) users will have to wait for some time, however.
"Microsoft is the latest virtualization party, and you still agent-based protection for Microsoft environments," Agastya said.
http://chasingeyes.com/index.php/2010/08/31/trend-micro-can-handle-your-security-problems-much-better/ |
| Back to top |
|
|
| |
| Trend Micro announced the latest version of its security software that protects operating systems, applications and data on physical, virtual and cloud servers, and virtual desktops. 
Deep Security 7.5, which leverages the latest VMware vShield Endpoint API, now comes with a new agentless anti-malware module that adds to the product's existing toolkit of protections including: intrusion detection and prevention, web application protection, application control, stateful firewall, integrity monitoring and log inspection.
Together with its other modules, Deep Security is a server and application protection software that enables physical, virtual, and cloud computing environments to become self-defending. Whether implemented as software, virtual appliance, or in a hybrid approach, this solution minimizes overhead, streamlines management, and provides strong, transparent security for virtual machines.
Deep Security also helps enterprises to achieve compliance with important standards and regulations such as PCI, FISMA and HIPAA.
Trend Micro Deep Security 7.5 is designed to prevent data breaches and business disruptions from emergency patching by providing a line of defense at the system itself, whether physical, virtual or cloud.
http://net-security.org/secworld.php?id=9807
|
| Back to top |
|
|
| |
| Recently at VMworld 2010, Trend Micro announced the latest version of its advanced security software that protects operating systems, applications and data on physical, virtual and cloud servers, and virtual desktops. Trend Micro Deep Security 7.5, which leverages the latest VMware vShield Endpoint API, now comes with a new agentless anti-malware module that adds to the product's existing toolkit of protections including: intrusion detection and prevention, web application protection, application control, stateful firewall, integrity monitoring and log inspection. "Although anti-malware protection is widely deployed across organizations of all sizes within virtual environments, traditional deployments perform poorly leading to lower levels of virtual machine consolidation, and generally impede virtualization efforts," said Steve Quane, chief product officer, Trend Micro. "Trend Micro Deep Security 7.5 offers the world's first anti-malware solution that is specifically designed for virtual environments and can be completely deployed with zero footprint on the virtual machine. This leads to maximum security and efficiency for our customers."
Together with its other modules, Deep Security is a comprehensive server and application protection software that enables physical, virtual, and cloud computing environments to become self-defending. Whether implemented as software, virtual appliance, or in a hybrid approach, this solution minimizes overhead, streamlines management, and provides strong, transparent security for virtual machines. Deep Security also helps enterprises to achieve compliance with important standards and regulations such as PCI, FISMA and HIPAA.
Trend Micro Deep Security 7.5 is designed to prevent data breaches and business disruptions from emergency patching by providing a line of defense at the system itself, whether physical, virtual or cloud.
What's NEW in Trend Micro Deep Security 7.5
Virtualization-aware, anti-malware module for VMware environments makes Trend Micro Deep Security one of the most comprehensive server security solutions available. The new module integrates new VMware vShield Endpoint APIs for anti-malware protection of VMware virtual machines with zero in-guest footprint. It optimizes security operations to remove security brown-outs commonly seen in full system scans and pattern updates, and it tamper-proofs security from sophisticated attacks by isolating malware from anti-malware. Deep Security 7.5 creates a giant leap in manageability and performance standards over other AV in virtual server and virtual desktop environments.
Integration with VMware vShield Endpoint APIs and VMware vShield Manager enables rapid deployment on VMware vSphere hosts and enables the Deep Security virtual appliance to immediately and transparently protect VMware vSphere virtual machines. Trend Micro has successfully implemented this latest API within Deep Security and will be collaborating with VMware for future solutions.
Powered by the Trend Micro Smart Protection Network
Deep Security's anti-malware module also integrates with the Trend Micro Smart Protection Network, the core technology infrastructure behind Trend Micro solutions. It uses a number of patent-pending technologies and combines Internet-based (or "in-the-cloud") technologies with real-time correlation and analysis to provide immediate, real-time protection. Through this integration, Deep Security not only removes anti-malware pattern files altogether from the virtual machines, but the patterns that now reside in the virtual appliance have a much smaller footprint than with typical solutions.
Complements Trend Micro SecureCloud security platform, which empowers businesses to operate in the cloud, whether public or private. While Deep Security provides the secure container into which customers can put their applications and data, SecureCloud uses encryption and patented key management so enterprises can protect and control their data in the private or public cloud.
"Trend Micro continues to work closely with us to help ensure the compatibility of Deep Security within VMware environments," said Parag Patel, vice president, global strategic alliances, VMware. "Leveraging our latest VMware vShield Endpoint API, Deep Security now includes more secure and high-performance anti-malware protection, a crucial and significant ingredient for customers doing business in today's virtualized IT environments."
Trend Micro Deep Security is part of Trend Micro Enterprise Security – a tightly integrated offering of content security products, services and solutions that delivers maximum protection from emerging threats while minimizing the cost and complexity of security management.
http://www.bsminfo.com/article.mvc/Trend-Micro-Announces-Trend-Micro-Deep-0001?VNETCOOKIE=NO |
| Back to top |
|
|
| |
| Trend Micro is adding an anti-malware module to its host-based security product, now Deep Security 7.5, the host-based intrusion prevention product from the acquisition of Third Brigade last year. They are also introducing SecureCloud, a hosted encryption service for protecting data in the cloud. The anti-malware capability protects individual virtual machines at the hypervisor level, eliminating the need for managing agents on each client VM. SecureCloud encrypts data to and from Infrastructure as a Service cloud improving security and compliance requirements. Deep Security was among the first products to leverage VMware's vSafe API, which allows security vendors to make their products virtualization aware. The core Deep Security product is a "deep inspection" module that includes host-based IDS/IPS, Web application protection and application control. The other optional modules are firewall, log inspection and integrity monitoring.
The advantage to enterprises is the ability to manage security at the host device level, rather than on each VM. VSafe also enables enterprises to apply security policies to individual VMs and to traffic between VMs. It also provides visibility into the virtualized environment. This kind of visibility and control has been largely limited to virtualization-specific security vendors such as HyTrust and Altor Networks, but traditional security vendors such as Trend are beginning to take advantage of VMSafe as well as the vShield API, which allows security to be applied across logical zones.
Enterprises are asking about virtualization-specific security, said Forrester Research analyst Chenxi Wang, but she isn't sure they're spending a lot of money on it, at least not yet. The market for virtualization isn't large at this point, and there aren't that many organizations that have a highly virtualized environment that would benefit from the level of control and visibility these security products offer. That's bound to change.
"Trend Micro is looking to the direction in which the market is going," said Wang. "The population of organizations actually running virtual infrastructure isn't that big, but the trend of the future is people who will run their own virtualized infrastructure or outsource to either a hosted private cloud or a public cloud. That's why security companies are beginning to offer mechanisms for virtualized infrastructure in the data center."
The anti-malware module simplifies configuration, update and patch management. It also assures that new VMs and VMs which may have been offline have current protection. Deep Security avoids the performance impact from serial anti-virus scans and updates. Enterprises using infrastructure as a service (IaaS) can leverage Deep Security by installing it on host servers in the cloud provider environment. Deep Security 7.5 is in beta and expected to be available in Fall 2010. Pricing starts at $1000/cpu socket.
The cloud encryption service, SecureCloud is also designed for IaaS scenarios. The service provides block encryption for mounted storage volumes by installing an agent on the cloud servers and retaining key management. Trend is building upon the encryption technology from its Identum acquisition in 2008, which serves as the basis of its e-mail encryption.
TrendMicro claims SecureCloud will facilitate movement from the data center to the cloud and eases portability between service providers, as it delivers control, security and compliance through encryption. When auditors come around, IT can say have policies and encryption in place reducing the scope of the audit. SecureCloud is available for beta trial now, initially for Amazon EC2, Eucalyptus and VMware vCloud services and will be generally available in Q4. Trend Micro also plans an on-premises product that will organizations to encrypt data in the cloud and manage their own encryption keys to be released in the first half of 2011.
"Today, encryption is only way a company gain a little bit of comfort in terms of data protection in cloud," said Forrester's Wang. "Otherwise any admin from the public cloud company can look at your data." |
| Back to top |
|
|
| |
| Trend Micro's new Deep Security 7.5 is able to detect malware and intrusions in virtual machines without the use of agents -- the tiny pieces of lightweight software traditional security and monitoring utilities plant within the utilities they're operating. The company has also opened its SecureCloud as a public beta. Trend Micro (Nasdaq: TMIC) on Tuesday announced an agentless antimalware module for VMware (NYSE: VMW) virtual environments in its Deep Security 7.5 product.
The company also announced on Tuesday that it's throwing open its Trend Micro SecureCloud beta to the public.
Both products will protect data in the virtual environment as well as in the cloud.
Deep Security 7.5 combines agentless antimalware with agentless intrusion detection and agentless Web application protection.
Traditionally, security, monitoring and other apps that watch a computing On-demand Remote Support - Free Trial from LogMeIn Rescue: Fast, secure solution for today's most popular platforms. environment plant a small agent -- a bit of software -- into the apps they are watching. This sends back reports on the monitored app's status to the IT console. However, agents consume I/O (input/output) and network resources, and although each agent may be lightweight, enough of them can slow down a system perceptibly. The move in recent years has been toward agentless monitoring.
Deep Security 7.5 is integrated with the latest VMware vShield Endpoint API and with VMsafe APIs. This enables its rapid deployment on VMware ESX servers as a virtual appliance.
A virtual appliance is a packaged virtual machine running on the hypervisor. The agentless virtual appliance in Deep Security 7.5 is the first of its kind for antimalware protection, said VMware executive Harish Agastya.
The agentless antimalware capability in Deep Security 7.5 can monitor virtual and physical environments as well as the cloud.
Smershing Through Security Problems
Agentless security appears to offer several benefits to enterprises.
"The cloning of virtual machines is one of the great benefits of virtualization -- it lets you come up to speed with a new machine in minutes instead of the weeks you'd need to provision a physical server," Agastya told TechNewsWorld. "However, there's been no ability to automatically provision virtual machines with security at once; typically you provision the right level of security after the virtual machine comes up."
That creates a time gap, which leads to a security gap. Taking the virtual appliance approach will eliminate these gaps, Agastya indicated.
Another major attraction of virtual machines (VMs) for IT is that VMs can be put away until they're needed again. However, this leads to yet another security problem -- that the security agent on the VM is out of date, Agastya said. A virtual appliance is always kept up to date, so a VM called out of storage will automatically get the latest protections.
Yet another problem with security on VMs is the possibility of a security brownout occurring. This happens when security operations running concurrently on several VMs on a physical server compete for the same resources such as input/out and memory, Agastya explained.
"We serialize and stagger operations in our virtual appliance so it serves the needs of full system scanning for one virtual machine after another," Agastya said.
The appliance further saves physical server resources when it comes to updating the antimalware to deal with the latest attacks. "We don't need pattern updates for each virtual machine any more, we just do pattern updates on the virtual appliance and these apply to each virtual machine," Agastya remarked.
Get Hands-On With SecureCloud
Trend Micro also threw open its SecureCloud beta to the public Tuesday. The beta had previously been limited to early tech adopters.
"We're saying, 'Come play with the thing and tell us it's better than play dough," Todd Thiemann, Trend Micro's senior director of data center security, told TechNewsWorld.
SecureCloud uses a patent-pending technology that integrates policy-based key management, industry-standard encryption and virtual-server authentication to deploy data into public or private cloud environments.
This lets cloud users secure sensitive information without having to install a complex secure file infrastructure. Users can choose and manage their own security solution because they can choose where to store the encryption keys.
A Little Distance Is a Good Thing
SecureCloud separates key management from encryption and decryption. Users can either get key management as a service, or they can put the key management module in a data center by provisioning a server and then manage those keys for their cloud servers from within the data center, Thiemann said. Traditionally encryption keys are stored in a server provided by the security vendor or cloud vendor for a fee.
This separation of key management from encryption gives users portability between cloud service providers, Thiemann pointed out.
"You can move your security with your apps," he explained. "Also, you're not dependent on the cloud service provider's security architecture."
The separation of keys from encryption could also come in handy in an IT audit, Thiemann said.
"When you have an audit of IT, you can reduce the scope of the audit -- they only have to audit your key management policies," Thiemann commented.
Further, the separation enables the separation of duties, one of the core concepts of security. Separation of duties creates a system of checks and balances; perhaps the easiest instance is seen in a business's accounting department, where billing and payments are carried out by separate departments.
"When an application owner wants to fire up a cloud server, you could set the IT department as the ones who man the security, for example," Thiemann said.
Trend Micro is working to bring its agentless antimalware capability to Citrix (Nasdaq: CTXS), Agastya said. Microsoft (Nasdaq: MSFT) users will have to wait a while, however.
"Microsoft is the latest to the virtualization party, and you still need agent-based protection for Microsoft environments," Agastya added.
http://www.technewsworld.com/story/70726.html?wlc=1283277040 |
| Back to top |
|
|
| |
| Trend Micro is moving ahead with its virtualization and cloud security strategy with new anti-malware technology for virtual environments and encryption key management for the cloud. Trend Micro continued its push around virtualization and cloud security today with two new product releases.
Part one of the announcement - which was made in conjunction with the VMworld 2010 conference running this week in San Francisco - is Trend Micro Deep Security 7.5, which leverages the latest VMware vShield Endpoint API and now includes an agent-less anti-malware module.
By integrating the vShield APIs, Trend Micro is able to provide completely agent-less security for virtual machines (VMs), Harish Agastya, director of datacenter security marketing at Trend Micro told eWEEK.
"No need to put an agent on any of those VMs, so no need to configure it, reconfigure it, patch it…we've taken all of that headache away from the administrator," he explained.
The new module adds to the product's existing toolkit of protections, which includes among other things deep packet inspection, integrity monitoring and intrusion detection and prevention.
In addition to Deep Security, Trend Micro also announced a beta release of SecureCloud, a hosted key management and data encryption service designed to give enterprises more control over data stored in public, private or hybrid clouds.
"The challenge that we are addressing is one of control," said Todd Thieman, senior director of datacenter security marketing at Trend Micro. "If you look at what the cloud does in terms of controlling data, it poses some new challenges."
The technology will facilitate the movement between the datacenter and the cloud, he added. With SecureCloud, enterprises can decide when and where keys are released and secure volumes are accessed as well as establish accountability over data access and key deployment with logging and audit functionality.
"The cloud's been the sexy topic du jour; a lot of people are talking about how they want to use it and that security is a significant inhibitor," Thieman said. "While there's a lot of talk…we're delivering substance so enterprises can go out there and take advantage of the cloud economics and the flexibility that the cloud has to offer."
Delivered via software-as-a-service, SecureCloud supports Amazon EC2, Eucalyptus, or VMware vCloud. The product is expected to be generally available in the fourth quarter of 2010. Organizations interested in the beta can apply here.
http://www.eweek.com/c/a/Security/Trend-Micro-Targets-Virtualization-Cloud-Security-219028/ |
| Back to top |
|
|
| |
| Positioned alongside VMware's vCloud Service Director news today are offerings from partners designed to flesh out advanced features for the new cloud platform. Here is a sampling of these announcements:
* HyTrust is shipping a new product called HyTrust Cloud Control, which provides security policy enforcement in vCloud Service Director environments. The product will also support advanced security architectures, such as federated identity management and multifactor authentication.
* Zenoss is offering independent monitoring and service assurance software that can perform dependency visualization, configuration tracking, performance monitoring, and fault management for public and private cloud infrastructures based on VMware's Cloud Service Director.
* HP is demonstrating and touting its CloudStart data center infrastructure stack, which has been integrated and certified with vCloud Director. The VMware, Cisco and EMC joint venture Acadia will also support vCloud Service Director with its vBlock bundle.
Cisco enhances Nexus 1000v with virtual firewall
Cisco Systems Inc. has announced the Virtual Security Gateway, a virtual firewall product that integrates with Cisco's Nexus 1000v virtual switch. With it, network administrators can set and apply security policies on individual virtual machines, protecting them from unauthorized access. Delivered as a virtual appliance, the Virtual Security Gateway plugs seamlessly into the Nexus 1000v, leveraging its interface and offload capabilities. Cisco will announce a beta of the product at VMworld 2010, with general availability slated for the coming months.
Symantec and McAfee to update virtualization security
Symantec Corp. has announced plans to integrate endpoint security offerings including antivirus with VMware's vShield Endpoint application programming interface (API). According to a VMware preview, Symantec uses the vShield Endpoint API to create a VMware Consolidated Backup-like proxy virtual appliance that centralizes antivirus services, including on-access and on-demand file scanning, away from production clusters. VMware says McAfee is also preparing to integrate its antivirus software with vShield Endpoint.
Trend Micro launches cloud encryption appliance
Trend Micro has already integrated with the vShield Endpoint API in version 7.5 of its Deep Security software, which will be on display at VMworld. Trend is also previewing a new encryption appliance that allows enterprise users to control encryption keys locally for files sent to service provider data centers. The company expects both products to ship in the fourth quarter.
Aspera touts file transfer acceleration, now certified with VMware
Aspera's custom faspex protocol, which the company claims can speed file transfers to gigabits per second (Gbps) of throughput, has been blessed for use in VMware environments with Aspera's faspex Server 2.0. Faspex Server is an alternative to traditional FTP servers, with collaboration features such as version and change tracking; as of today it has been officially certified for use in vSphere environments.
And for more VMworld 2010 conference coverage, click here.
http://searchservervirtualization.techtarget.com/news/article/0,289142,sid94_gci1519338,00.html |
| Back to top |
|
|
| |
| Trend Micro has posted an update for its Deep Security server protection platform, targeting server virtualisation and sporting a new module for VMware systems. The module will integrate Trend's anti-malware into a virtual appliance, protecting systems at the hypervisor level and eliminating the need for anti-malware tools to be installed on individual virtual machines.
Todd Thiemann, senior director of datacentre security marketing at Trend, told V3.co.uk that the move is designed to improve performance and boost security.
Thiemann explained that, when each virtual machine runs its own anti-malware installation, tasks such as timed updates can cause each machine to request resources at the same time, potentially creating performance and stability issues for the host server.
By keeping anti-malware protection running at the virtual appliance level, Deep Security 7.5 also looks to solve vulnerabilities when a new virtual machine is created or reactivated with older security protections.
"You are getting stronger security because the protection is always on," Thiemann said. "When you fire up the virtual machine you don't have to worry that it might have an outdated anti-malware file."
Additionally, he noted that the virtual appliance offers security advantages such as the ability to prevent attacks between virtual machines and protection from malware infections that attempt to disable anti-malware components.
Trend is also looking to expand security for cloud computing platforms. The company is launching a beta test for a service to encrypt data stored on cloud computing platforms such as Amazon's EC2.
SecureCloud allows users and administrators to encrypt mounted volumes and then manage security keys along parameters such as location and security clearance.
Thiemann said that the beta is the first step in a larger effort to solve the lack of confidence many companies feel about migrating data to cloud services.
"This allows the service provider to address and knock down that inhibitor," he said. "We have had some discussions and they are all very supportive of this. "
http://www.v3.co.uk/v3/news/2268963/itrend-micro-overhauls-deep |
| Back to top |
|
|
| |
| Selected press release pickup. Bradenton.com CB Online CNBC Dark Reading Forbes.com GovernmentSecurity.org IndianWeb2 Sacramento Bee Security Manager Jobs TD Waterhouse Yahoo! Finance |
| Back to top |
|
|
| |
| Trend Micro today announces two new solutions designed to give channel partners a security boost in virtualized and cloud environments: Deep Security 7.5, an update that brings agentless anti-malware to VMware environments; and SecureCloud, a first-of-its-kind public cloud data protection solution, the company claims. Here's the scoop. Deep Security 7.5 (Available "Q4 2010," with pricing at $1000/CPU socket), which can be deployed as software, a virtual appliance, or a combination of the two, now integrates VMware vShield Endpoint APIs such that it can protect VMs with no in-guest OS footprint. Trend Micro Senior Director of Datacenter Security Marketing Todd Thiemann says that with this approach, each VM is under less strain, and it won't take a datacenter to its knees when its time for VM after VM to apply security patches. But the really interesting announcement is Trend Micro SecureCloud, which is designed to give enterprises control of security for data stored in public, private or hybrid clouds. Thiemann says that while cloud service providers have responsibility, enterprises are left holding the bag in the case of a cloud security breach — but SecureCloud is designed to stop all that by leveraging encryption key-management technology as a service. SecureCloud (also available Q4 2010) works by giving enterprises control over their own encryption key, ensuring that they're the only ones who can access sensitive data. In the eventuality of a breach, anyone without that key would be left with unusable gobbledegook. Trend Micro says it can help avoid vendor lock-in since the administrator is in charge of the data's protection at all times — if you go from any of the supported cloud environments (Amazon EC2, Eucalyptus, and VMware vCloud) to the other, the service provider you just left only has one of those unreadable copies at worst. VMworld continues this week, and The VAR Guy is keeping his ear to the ground for more buzz like this, so keep watching. http://www.thevarguy.com/2010/08/31/trend-micro-gets-virtualization-update-public-cloud-security/ |
| Back to top |
|
|
