S E C U R I T Y P R O B L E M W I T H C L O U D C O M P U T I N GPresentation Transcript
MARTIN BIOH RES-531 PROF. DOUGH EARHART
SECURITY ISSUES THAT AFFECT CLOUD COMPUTING DATA STORAGE
SECURITY PROBLEM WITH CLOUD COMPUTING
What is cloud computing in the first place?
Cloud Computing is a metaphor for the internet “the Cloud”, Cloud computing is virtual servers available over the internet
Cloud computing is also known as SaaS (Software as a Service).
Problems with Cloud Computing Storage
How do companies make informed decisions about data storage in the cloud?
How do companies protect the privacy of the stored data in the cloud?
How is compliance and quality controlled in the cloud?
Purpose of My Research
The purpose of this research is to examine the basic security protection method, compliance and how companies can make informed decisions and determine whether data stored in the cloud have sufficient privacy protection for customers and meet technical and regulatory issues.
What Companies needs to know Before saving in the Cloud
What service are we contracting for and what are the vendor’s records management and compliance obligations?
How is information destroyed?
What are the vendor’s policies for backups, replication, or failover?
What is the provider’s internal audit process?
Is the vendor open to being audited for compliance?
Recommendations to Consider Before any companies contract a Cloud provider
How secure is the solution you're considering
Is your data available from anywhere so that you can use it as a means of disaster recovery? Does the provider have a disaster recovery plan of its own?
Are there limits on the scalability? What happens if you grow beyond what
you originally planned and contracted for?”
Does the provider have a track record and enough customers to be considered stable?
Is the provider's storage located in a real data center?
Privacy and Security
First among cloud computing data storage issues is security and privacy
In fact, a Software as a Services (SaaS) provider may be relying on other external providers for its backbone, infrastructure, and data storage.
Cloud computing storage places business data into the hands of an outside provider, cloud computing makes regulatory compliance inherently riskier and more complex than it is when systems are maintained in-house. Loss of direct oversight means that the client company must verify that the service provider is working to ensure that data security and integrity are ironclad.
Cloud compliance is difficult because you do not know where you data are located.
Not only does an organization not know what is being done with its data, it may not even know who the providers are. Cloud computing models ignore these problems and make compliance and verification of compliance difficult, if not impossible.
Cloud computing storage has become a hot term in the last few years, but a clear description of what it is, what it can do, and why companies might use it is often difficult to find
Cloud computing storage may not be suitable for all businesses. Security/privacy and Compliance are a major concern.
Cloud computing storage may be affordable and suitable for small businesses but certainly can not replace the traditional way of storing customer data.