Thursday, June 2, 2011

It’s A Risky Business ?? Cloud v/s In-house


Cloud computing- once considered a mere buzz-word- in now a happening reality. Cloud based solution provide mechanism to host office on the cloud not just because they are cheaper(they do away with Software costs & hardware), but also provide flexibility to access information from any place with a decent internet connection. It typically works service on depend on rented environment.
So if you’re not on the cloud already, you might want to check out options to see what you’ve been missing out on…
Five Free web based office Suites that might of use

1. Google Docs
2. Office Web Apps
3. Thinkfree
4. Documents to Go
5. Zoho
Fortify Software sponsored a survey of 100 hackers at last month. They discovered that 96% of the respondents think that the cloud creates new opportunities for hacking, and 86% believe that “cloud vendors aren’t doing enough to address cyber-security issues.”

In line with the recent developments, Amazon.com Inc. (AMZN)’s Web Services cloud- computing unit was used by hackers in last month’s attack against Sony Corp.


Is it secure and reliable solution for Customer ?Are we expecting to see growth and Customer attention ?
Definitely, such event will not slow down the usage of Cloud based system, infect it will encourage system owner to build robust security framework. The major loop holes or one of the biggest weak link is the limited user awareness on security i.e. password management.
It has been observed that majority of users either use same password across all the system/application they use or store password in file without any encryption mechanism. User needs to be educated on best practices of password management strategies. Multi-level authentication like OTP should be introduce which will also reduce social engineering attacks.
Intentional attacks can happen from anywhere, but at a same time Cloud provider needs to introduce background verification process to reduce attacks within the cloud …

Cloud solutions are not the only one experiencing issues related to security, however major player in the market devastated and trying to realign the security framework from the security breach.

  • NASA website hacked(May 11, 2011, 04.53pm IST)-According to Fox News, hackers compromised pages on NASA's Jet Propulsion Laboratory website, before the May 16 scheduled launch of the shuttle Endeavor. The affected pages included barrages of "nonsense text" and interest-generating keywords, like "Edit buy adobe premiere pro cs4 some callouts and balloons to make this time it took you and saved you a long time,
  • Nasdaq Confirms Servers Breached
  • Hackers steal owner data from Honda
  • Two Arrested For AT&T iPad Network Breach
  • Nigerian government agency website hacked by “Cyberhacktivists”
  • 100,000 Credit Cards Compromised By Data Breach



1 comment:

Rajiv Mishra said...

Cloud is the way to go in future. It is not feasible for all organisations to sustain the high security controls in todays hichtech environment. The list mentioned like Amazon Outage, Sony data breach are some and these incidents would enable and force cloud service providers to strengthen the security controls. As organizations perform complete inhouse security controls they must also test and implement such controls in cloud, a bit more due to changed scenarios of apps being available on internet. Cloud Security / *aaS is still not much mature and would be mature with time and learings from these incidents.

US, Europe, UK and formulating regulations around cloud computing. Even the govt organizations are starting to use Public/Private cloud services.

At last "No risk no Gain" so one should think seriously before embracing cloud and perform all due deligence.