VMware plans to open its hypervisor to security vendors with a set of APIs that make it easier to protect virtual machines from threats including viruses, Trojans and keyloggers.

Without these APIs, security vendors building antivirus and firewall tools for virtual servers are removed from the hypervisor by several layers and therefore cannot see everything that happens within the virtual environment, according to Yankee Group Analyst Phil Hochmuth.

This potentially makes security products less robust than they could be, and creates annoyances for users. For example, a customer might have to install one instance of an antivirus program on each virtual server, rather than let one instance of the program protect all the virtual machines within a physical piece of hardware, Hochmuth says.

VMware intends to fix that problem with VMsafe, the set of APIs announced Wednesday.

"Instead of installing and running McAfee [antivirus software] on 20 different virtual servers, you just do it once," Hochmuth says. (Compare antivirus products.) 

Twenty security vendors are already building products to protect virtual machines using the VMsafe APIs, according to VMware.

Christopher Bolin, CTO at McAfee, says VMsafe is intended to be part of the VMware virtual-machine hypervisor to allow third-party developers to "see network memory, CPU and traffic before the traffic reaches the guest operating systems."

By giving partners more visibility into traffic at the hypervisor level, they will be more likely to catch malware and other types of intrusions before they enter a virtual system, Hochmuth says.

Previously, security software really had no advantage over malware that's infiltrated a virtualized server, says Parag Patel, vice president of alliances at VMware. The visibility into the hypervisor afforded by the VMsafe APIs gives security software a higher degree of privilege than malware.

The APIs also improve security with more thorough isolation of virtual machines, Patel says.

The 20 vendors developing new security products for use with VMware include Check Point, F5 Networks, IBM, Imperva, McAfee, EMC's RSA division, Secure Computing, Symantec and Trend Micro. Security products built using VMsafe should be out later this year, Patel says.

Whitepapers

• Symantec State of the Data Center Report
• Gene Kim's Practical Steps to Mitigate Virtualization Security Risks
• Monitoring and Managing App Performance
• Monitoring and Managing VoIP
• SNMP Monitoring: One Critical Component to Network Management
• SNMP Monitoring: One Critical Component to Network Management

View more DATA CENTER whitepapers

Webcasts

• Managing the End User Experience-A Real World Example of Success
• Best Practices for Deploying WAN Optimization for Disaster Recovery
• Tips and Techniques for Remote Data Backup and Delivery
• WAN Optimization Landscape
• Oracle Database 11g: Advances in Compression, Real Application Testing and Data Guard
• Solutions to the Toughest IT Challenges in Remote Offices

View more DATA CENTER webcasts

Special Reports

• Data Centers: At the center of the action
• Executive Guide: Data Center Decisions
• Get More From Your WAN
• Executive Guide: Storage Heats Up
• Network World Executive Guide: Perfecting Application Performance Management

View more DATA CENTER special reports