Cloud computing security refers to the broad group of controls, policies, and technologies that are used to protect the applications, data, and infrastructure associated with cloud computing. Cloud computing security is a sub-domain of computer security, network security, and information security.
Some of the security risks associated with the cloud include:
• insider threats such as the loss of control over the actions of end users
• massive data breaches that require public disclosure and notification of victims
• loss of revenue from public data breaches
• breaches of contract with business partners or customers
• the loss or theft of sensitive data
• increased customer suspicion and diminished trust due to security risks
• data exfiltration techniques and malware infections that unleash targeted attacks
• violations of compliance regulations
• inability to physically access the servers hosting data
• the possible viewing of one customer’s data by another customer
• and other unique security concerns associated with virtualization
Defensive implementations associated with cloud security architecture include corrective controls, deterrent controls, detective controls, and preventative controls. Some aspects of cloud security and privacy include the management of identity, physical security of hardware, screening of potential recruits and other personnel security measures, and assessing the vulnerability of the cloud through scanning and penetration testing.
Security requirements that limit the threats associated with data security include access controllability, data confidentiality, and data integrity. Other ways to increase the level of privacy protection include the use of advanced encryption algorithms and compliance with laws and regulations pertaining to the storage of use of data.
This whitepaper explains the vital importance of protecting customers’ data in the cloud and proposes a variety of security solutions. It discusses how to protect customers, APIs, data centers, DNS services, employees, enterprise applications and data, and web applications. IT business professionals who are looking for solutions to cloud-based security issues need to read this whitepaper.