What are the security issues around cloud computing?

In my opinion, cloud security architecture is effective only if the correct defensive implementations are in place. An efficient cloud security architecture should recognize the issues that will arise with security management. The security management addresses these issues with security controls. These controls are put in place to safeguard any weaknesses in the system and reduce the effect of an attack. While there are many types of controls behind a cloud security architecture, they can usually be found in one of the following categories: Deterrent controls: These controls are intended to reduce attacks on a cloud system. Much like a warning sign on a fence or a property, deterrent controls typically reduce the threat level by informing potential attackers that there will be adverse consequences for them if they proceed. (Some consider them a subset of preventive controls.) Preventive controls: Preventive controls strengthen the system against incidents, generally by reducing if not actually eliminating vulnerabilities. Strong authentication of cloud users, for instance, makes it less likely that unauthorized users can access cloud systems, and more likely that cloud users are positively identified. Detective controls: Detective controls are intended to detect and react appropriately to any incidents that occur. In the event of an attack, a detective control will signal the preventative or corrective controls to address the issue. System and network security monitoring, including intrusion detection and prevention arrangements, are typically employed to detect attacks on cloud systems and the supporting communications infrastructure. Corrective controls: Corrective controls reduce the consequences of an incident, normally by limiting the damage. They come into effect during or after an incident. Restoring system backups in order to rebuild a compromised system is an example of a corrective control.

0 Upvotes 0 Upvotes 0 Downvotes

• • Report Abuse
• Comment

Yes, there are some security concerns with cloud computing - 1. Data Breaches - Cloud computing and services is a newer technology, yet data breaches in all forms have existed for years. Cloud comes with unique features making it vulnerable to security breaches. 2. Hijacking Accounts - Attackers now have the ability to use one's login information to remotely access sensitive data stored on the cloud; additionally. However, the most notable new threat known as the Man In Cloud Attack involves the theft of user tokens which cloud platforms use to verify individual devices without requiring logins during each update and sync. 3. Malware injections are scripts or code embedded into cloud services that act as valid instances and run as SaaS to cloud servers. This means that malicious code can be injected into cloud services and viewed as part of the software or service that is running on the cloud servers themselves.

0 Upvotes 0 Upvotes 0 Downvotes

• • Report Abuse
• Comment

Hi, Today's cloud commuting is way better than what it was five or six years back in terms of security. All big cloud computing providers are certified by industry standard security guidelines and body like HIPPA, PCI-DSS, ISO, SOC etc. They have done their security audit regularly, but before going ahead and selecting any Cloud Computing providers you need to pick up either of first three renowned provider like AWS Azure and Google Cloud.

0 Upvotes 0 Upvotes 0 Downvotes

• • Report Abuse
• Comment