29 Sep CEO Jon Cartu Publishes – VMware Delivers Intrinsic Security to the World’s Digital…
PALO ALTO, Calif.–(BUSINESS WIRE)–VMworld 2020 — This week at VMworld 2020, VMware, Inc. (NYSE: VMW) unveiled new innovations to deliver intrinsic security to the world’s digital infrastructure. The solutions are designed to advance security for the public and private clouds, security operations and distributed workforces as organizations accelerate cloud adoption to build resilient, future ready digital infrastructure.
For many organizations, migrating to the cloud has had to happen quickly and at a large scale to ensure business continuity amid the global pandemic. As cloud computing infrastructures proliferate, vulnerabilities increase. Attacker sophistication, security threats, breaches, and exploits are more prevalent than ever. And today, security strategies are often vulnerable to attacks on modern cloud workloads.
“Amid global disruption, the key to survival for many companies has meant an accelerated shift to the cloud and ultimately, bolting on security products in their data centers,” said Sanjay Poonen, chief operating officer, Customer Operations, VMware. “But legacy security systems are no longer sufficient for organizations that are using the cloud as part of their computing infrastructure. It’s time to rethink security for the cloud, organizations need protection at the workload level, not just at the endpoint. The future of cloud must be met with a better way to secure data and applications.”
At VMworld 2020, VMware is delivering a range of solutions and services to help customers survive and thrive in the most turbulent times in generations. VMware’s cloud, app modernization, networking, security and digital workspace platforms form a flexible, consistent digital foundation on which to build, run, manage, connect and protect applications, anywhere.
Security for the Private and Public Cloud
As organizations continue their journey towards cloud transformation and application modernization, they require modern security solutions that are both powerful and easy to operationalize. Unveiled today, VMware Carbon Black Cloud WorkloadTM, delivers advanced protection purpose-built for better securing modern workloads to reduce the attack surface and strengthen security posture. This innovative solution combines prioritized vulnerability reporting and foundational workload hardening with industry-leading prevention, detection and response capabilities to protect workloads running in virtualized, private and hybrid cloud environments.
The solution combines Carbon Black’s security expertise with VMware’s deep knowledge of data centers to build security into workloads. VMware customers can experience the advanced new solution with a six-month unlimited free trial of VMware Carbon Black Cloud Workload Essentials, available for all current vSphere 6.5 and VMware Cloud Foundation 4.0 customers.
Tightly integrated with VMware vSphere, VMware Carbon Black Cloud Workload provides agentless security that alleviates installation and management overhead and consolidates the collection of telemetry for multiple workload security use cases. This unified solution enables security and infrastructure teams to automatically help secure new and existing workloads at every point in the security lifecycle, while simplifying operations and consolidating the IT and security stack.
Workload security is especially complicated in hybrid data center architectures that employ everything from physical, on-premises machines to multiple public cloud infrastructure as a service (IaaS) environment to container-based application architectures. For security teams, VMware Carbon Black Cloud Workload will offer:
- Visibility to Identify Risk and Harden Workloads: Carbon Black Cloud Workload helps security and infrastructure teams focus on the most high-risk vulnerabilities and common exploits across their environments, because it’s not about finding the most vulnerabilities—it’s about finding the right ones. Prioritize vulnerabilities based on a combination of the Common Vulnerability Scoring System (CVSS), real-life exploitability and real-life frequency of attack, increase patching efficiency with best-in-class prioritization, and take immediate action in vSphere Client.
- Prevention, Detection and Response to Advanced Attacks: Security teams often lack visibility and control in highly dynamic virtualized data center environments. Carbon Black Cloud Workload protects workloads running in these environments by combining vulnerability assessment and workload hardening with industry leading next-generation antivirus (NGAV), workload behavioral monitoring, and endpoint detection and response (EDR) for workloads.
- Simplified Operations for IT and Security Teams: The VMware intrinsic approach builds security into the virtual fabric, enabling protection everywhere workloads are deployed, and eliminating the trade-off between security and operational simplicity. But organizations also need the infrastructure team to be able to operationalize more of security policy and hardening. That requires giving them the right visibility into risk, and the tools to harden workloads right inside their own consoles. Carbon Black Workload accomplishes this by building security risk visibility right into VMware vCenter, with the same visibility security operations see in Carbon Black Cloud – giving them a single source of truth. This will not only accelerate response to critical vulnerabilities and attacks, it will foster far greater collaboration between IT and security teams.
VMware will introduce expanded offerings for Carbon Black Cloud Workload later this year including a new module for hardening and better securing Kubernetes workloads. The new capabilities will give security teams governance capabilities and control of Kubernetes environments.
The Future of Security Operations
Security incident detection and response has never been more critical or more challenging. A July VMware Carbon Black report found 94 percent of organizations worldwide suffered a data breach1 from March 2019 to March 2020. Security operations teams need detection capabilities that go beyond discovering malicious software to discovering software being used maliciously. They need a broader set of “camera angles” that include endpoint, workload, network, user, and application. And…