Skip to main content
U.S. flag

An official website of the United States government

Official websites use .gov
A .gov website belongs to an official government organization in the United States.

Secure .gov websites use HTTPS
A lock ( ) or https:// means you’ve safely connected to the .gov website. Share sensitive information only on official, secure websites.

Full Virtualization Technologies: Guidelines for Secure Implementation and Management



Shirley M. Radack


This bulletin summarizes the information presented in NIST SP 800-125, Guide To Security for Full Virtualization Technologies: Recommendations of the National Institute of Standards and Technology, which was written by Karen Scarfone of G2, Inc., Murugiah Souppaya of NIST, and Paul Hoffman of the VPN Consortium. The guide discusses virtualization technology, a technique for simulating the software and the hardware upon which other software runs. Organizations adopting virtualization technologies can operate their information systems more efficiently, reduce their energy, operations and maintenance costs, and spend less on hardware and space for hardware. The bulletin includes information about the forms of virtualization, how virtualization contributes to operational efficiency, the security issues that need to be addressed by organizations adopting virtualization systems, and NIST’s recommendations for the secure implementation of virtualization. The bulletin provides information about resources that are available to support organizations in their deployment of virtualization.
ITL Bulletin -


desktop computers, full virtualization, guest operating systems, hardware, hypervisor, information security, information systems security, operating systems, risks, security management, security threats, servers, system development life cycle, system software, system vulnerabilities, virtual machine, virtualization


Radack, S. (2011), Full Virtualization Technologies: Guidelines for Secure Implementation and Management, ITL Bulletin, National Institute of Standards and Technology, Gaithersburg, MD, [online], (Accessed February 26, 2024)
Created April 25, 2011, Updated January 27, 2020