cloud computing security

Security Issues with Cloud Computing

Cloud Computing Security issues depend on the type of Cloud Computing used. The framework for Cloud Computing Security is the same we would use for information security. With Cloud Computing specifically we are addressing new variables have changed over a more traditional network infrastructure, but we follow the same process of protecting the confidentiality, integrity and availability of our business data, business applications, and our Cloud Computing Clients (devices). Cloud Security issues arise when there is a failure to adequately address the variables in specific Cloud Computing implementation.

Because Cloud Computing is too broad to go into all the details for the associated security, Cloud Computing Security issues should be done on a case-by-case basis. What is acceptable for one company will not be for another. Therefore, here are some of the areas of concern with Cloud Computing Security:

The Cloud Computing Company’s Security (The hosting company, or provider)

In a multi-tenant Cloud Computing scenario, attacks by other users 

Those using the same hardware or applications, what measures are put in place for isolating, protecting and auditing.

Operating System and application Security Settings

Vulnerabilities in the code for the operating system, application, as well as viruses, malware, and manual and automated attacks all have to be considered and addressed.

Availability & Reliability Issues How do you get support, guaranteed response times and service levels, availability from the Cloud Company’s side, availability from the business side, reliability and security between the business and the Cloud Computing Company, and auditing of these issues.

Legal & Regulatory Issues What laws and regulations are applicable in cloud computing, what measures are in place to ensure control (including the control over where the data may reside), what certifications are needed for compliance

Trust level between the Cloud and the Business (are only some operations run in the cloud, if so, what is the trust relationship between the cloud and the rest of the organization).

Cloud Computing Company’s security matched with businesses – The Cloud Computing security issues one may first think of here, are the Cloud Computing Company’s policy for reporting breaches in security, or their controls over security; but because Cloud Computing Companies are very concerned in ensuring the security of their clients, and their client’s data, one issue to not forget is the business’s control over their employee’s and what they are doing in the cloud environment, and if inappropriate what are the actions from the Cloud Computing Company toward the business.

The bottom line in regards to Cloud Computing and security is that it should not be taken lightly, businesses should use Cloud Computing consultants to strategize and plan their migration, and for most small and medium businesses the Cloud Computing security will be a significant improvement.

National Institute of Standards & Technology– Guidelines on Security and Privacy in Cloud Computing

Cloud Security AllianceSecurity Guidance

Cloud Security Alliance– Cloud Computing Top Threats

Cloud Security Alliance– Cloud Security –Cloud Controls matrix, a guide for potential cloud customers to use to review security risk of a cloud provider.

Transactions on Information and System Security (TISSEC)- Research papers in all areas of information and system security

Comparative Approach to Cloud Security Models –Abstract & download site

Cloud Computing – Data Confidentiality and Interoperability ChallengesView

Deployment models for eliminating user concerns on cloud security view

Analysis of security issues of cloud-based web applications View

Customer-oriented ranking of cyber threat intelligence service providers View

Encryption algorithm in cloud computing view

Related Cloud Computing Security & Computer Security links:

NIST Cloud Forensic Analysis challenges pdf

Is Cloud Security improving? article

Have a specific security of Cloud Computing question?

Contact us today!

Cloud computing security is paramount for businesses to even consider using cloud computing. As it happens, cloud computing and cloud computing security are moving forward in a very fast-pace, due to the significant advantages cloud computing can offer companies. See our pros and cons of cloud computing to learn more of the advantages and drawbacks of cloud computing.

With a virtual private cloud, companies may carve out a virtual network that is isolated and acts just like their traditional network, but with the benefits of Cloud Computing. But there has been concerns regarding the security of the data in the cloud, especially in respect to meeting compliance and various industry regulations (CMMC, HIPPA, GLBA, etc). However these concerns have been addressed as well. Beyond the typical domain security groups, we have been utilizing encryption on all client data. With AES 256 bit encryption on information in the cloud, cloud computing security issues are addressed & mitigated.

To better understand how your company can leverage cloud computing while incorporating encryption & security specific to your industry and company specifications, contact us today.