1 Julius Davies Architectural Technology Specialist Microsoft

2 Reality Myth Red Pill and Blue Pill programs make virtualization insecure Security is the primary driver for desktop virtualization Reality Security will drive more secure server environments

3

4 VirtualizationStackVirtualizationStack

5 Windows Hypervisor Server Hardware

6 Virtualization Service Providers (VSPs) Windows Kernel Server Core Device Drivers VM Worker Processes VM Mgmt Service WMI Provider... Windows Hypervisor Server Hardware Provided by: Windows 3 rd Party ISVs Hyper-V

7 Provided by: Windows 3 rd Party ISVs Hyper-V Virtualization Service Providers (VSPs) Windows Kernel Server Core Device Drivers VM Worker Processes VM Mgmt Service WMI Provider Windows Hypervisor Server Hardware Virtualization Service Clients (VSCs) OS Kernel Enlightenments VMBus Guest Applications

8 Virtualization Service Providers (VSPs) Windows Kernel Server Core Device Drivers VM Worker Processes VM Mgmt Service WMI Provider Windows Hypervisor Server Hardware Virtualization Service Clients (VSCs) OS Kernel VMBus Guest Applications Enlightenments Windows 3 rd Party ISVs Hyper-V Hackers Attack Vectors

9

10 Patching the hypervisor Windows Update Managing lots of virtual machines System Center – Policy Driven Systems Minimize risk to the Root Partition Utilize Server Core Don’t run arbitrary apps, no web surfing Run your apps and services in guests Use AzMan to reduce admin privilege Connect to back-end management network Only expose guests to internet traffic

11

12 Folder Redirection Offline files

13

14 Management & Visibility Dynamic Response Network Edge Server Applications Client and Server OS vNext An Integrated Security System

15 Microsoft Identity Lifecycle Manager Provides a single view of a user’s identity and its privileges across the heterogeneous enterprise Enable end-users to request access to physical and virtual assets through a defined workflow Physical Environment Virtual Environment WS08 and Hyper-V Authorization Manager (AzMan) for Role-Based Access Control

16

17

18 Virtualization:Virtualization: Windows Server: Windows Server: Forefront: Forefront: Identity & Access:Identity & Access: System Center: System Center:

19 © 2008 Microsoft Corporation. All rights reserved. Microsoft, Windows, Windows Vista and other product names are or may be registered trademarks and/or trademarks in the U.S. and/or other countries. The information herein is for informational purposes only and represents the current view of Microsoft Corporation as of the date of this presentation. Because Microsoft must respond to changing market conditions, it should not be interpreted to be a commitment on the part of Microsoft, and Microsoft cannot guarantee the accuracy of any information provided after the date of this presentation. MICROSOFT MAKES NO WARRANTIES, EXPRESS, IMPLIED OR STATUTORY, AS TO THE INFORMATION IN THIS PRESENTATION.