The Rising Cyber Threats to Economy & National Security

No ratings

Presented at OWASPindia 2012 by

Cloud computing provides a host of benefits to organizations including areas like new or extended services and application services, data backup or recovery, increased capacity for processing and performance. But success itself is measured in risk and cloud computing, like any technological advancement comes with inherent risks. Security is a top concern for organizations while considering cloud technologies. While cloud technologies propose to offer security that is equal or better than that of an average corporation, one risk is in the set-up and adoption phase. In contracting with a cloud vendor the first massive challenge is in getting services, applications and data up and running which requires the transmission of existing data hosted internally to the cloud environment. Protection of data in transit is vital and presents one of the first and biggest risks to corporate security. Ensuring that proprietary data is a protected as it moves from its existing source to a cloud data center must be carefully managed and monitored. Interception of data in transit over the Internet if not properly secured is a major risk. The other key risk is related to data which is stored from multiple organizations and different levels of protection may be required, but even within one organization data may need varied levels of security. While data in cloud computing promises to improve availability and access it also increases the risk and threats to that data simply by nature of making it more accessible. Another risk comes with access to the data. If the goal is to provide easier and quicker access to corporate information, then connectivity is a key factor. If clouds support many companies spikes in the network during heavy usage points can drag down performance and access at peak times. And with access coming over the Internet outages from denial-of-service attacks, natural disasters or other technical issues may impact access to data and services in the cloud. The session shall cover on the key risks and the measures that organizations should be considering adopting while working on cloud strategy.