Overcast Show #8: Mar 13, 2009 - with Chris Hoff, Cloud Security Expert

Overcast: Conversations on Cloud Computing

Listen to the podcast:

<p xmlns="http://www.w3.org/1999/xhtml"/><p xmlns="http://www.w3.org/1999/xhtml"/><p xmlns="http://www.w3.org/1999/xhtml"><object data="http://overcast.typepad.com/overcast/files/player.swf" height="24" id="audioplayer1" type="application/x-shockwave-flash" width="290"> <param name="movie" value="http://overcast.typepad.com/overcast/files/player.swf"/> <param name="FlashVars" value="playerID=1&soundFile=http://overcast.typepad.com/overcast/files/podcast8.mp3"/> <param name="quality" value="high"/> <param name="menu" value="false"/> <param name="wmode" value="transparent"/> </object> </p><div xmlns="http://www.w3.org/1999/xhtml"><a href="http://overcast.typepad.com/overcast/files/podcast8.mp3">Download Show #8 in MP3 format</a></div><p xmlns="http://www.w3.org/1999/xhtml"><br/>In this podcast we talk to Christopher Hoff, renowned information security expert, and especially security in the context of virtualization and cloud computing. Chris is the author of the <a href="http://rationalsecurity.typepad.com/">Rational Survivability</a> blog, and can be followed as <a href="http://twitter.com/beaker">@Beaker</a> on Twitter.</p><p xmlns="http://www.w3.org/1999/xhtml"><strong>Show Notes:</strong></p><ul xmlns="http://www.w3.org/1999/xhtml"> <li>Chris talks about some of the myths and misconceptions about security in the cloud. He addresses the claim that <a href="http://rationalsecurity.typepad.com/blog/2008/11/cloud-providers-are-better-at-securing-your-data-than-you-are.html">Cloud Providers Are Better At Securing Your Data Than You Are</a> and the benefits and shortcomings of security in the cloud.</li> <li>We talk about Chris's <a href="http://rationalsecurity.typepad.com/blog/2009/02/what-people-really-mean-when-they-say-the-cloud-is-more-secure.html">Taxonomy of Cloud Computing</a> (excuse me, model of cloud computing)</li> <li>Chris goes through some specific challenges and solutions for PCI-compliance in the cloud</li> <li>Chris examines some of the security issues associated with multi-tenant architecture and virtualization</li> </ul>