Security in The Cloud at Web 2.0Security In The Cloud Is A Hot Topic We’re coming off the Web 2.0 event in San Francisco where there were many opportunities to talk cloud. Very often the discussions quickly came around to security in the cloud, in particular about concerns about the lack of security. These concerns are valid, as the promises of the cloud – scalability, efficiency, speed, etc – are enabled by shared resources and this means that there are inherent vulnerabilities. So what to do? Well for starters, ask your cloud hosting provider for an overview of their security efforts. Then, make sure the answers include a) a commitment to not allowing other customers to get in and at your data, b) systems and tools like IDS, IPS, and predictive modeling to keep the bad guys away or at least help to ID when they’re up to something, and c) monitoring inbound and outbound traffic with proactive attention if something’s amiss. This last point is key: solid architecture and security tools are great, but real live humans taking action is what can ultimately best save the day for you. So ask questions, keep your eyes open, and demand an active proactive approach to security from your cloud provider.
|
