Wednesday 25 February 2015

Top Threats to Cloud Security

Cloud computing has taken the IT landscape by storm, from SMEs to enterprises; all are using cloud services for flexibility, easy and added advantages. Although, cloud has numerous benefits but cloud security can pose some challenges. Here are the top threats to Cloud Security.






  • Data Breaches - The first security threat on the list is data breach. As per a recent research paper CSA, private cryptographic keys used by other Vms on the same server can be used by a virtual machine by extracting side-channel timing information. Again, you can do data encryption to reduce the risk of data breach. In addition, it is easy for hackers to misuse data especially when data is stored in public cloud as in a public cloud many companies share their data so data security is vulnerable.

  •  Hackers and Data Location - When you are using cloud services, as a user you will not be sure about where your data is hosted. You need to confirm the location details from your providers, they need to explicitly confirm whether they can store and process data in a specifically mention jurisdiction or not and be assure of a thing that they need to abide by local privacy requirements. If a hacker gains access to your credentials then he can manipulate your data, and redirect your client to illegitimate sites.

  •  Insecure Interfaces and API Vulnerability - Cloud computing providers use different set of software interfaces or APIs that are consistently use by customers to manage their cloud services. If an organization is exposed to weak interfaces and API's, it can result in many cloud security breaches like loss of confidential data, data availability and accountability.

  • Malicious Insiders - The more people who have access to your data, more it gets vulnerable.Although company's grant access to employees after closely monitoring their day to day work activities but there can be threat from your own cloud service provider. Whether allured by a personal gain or some hidden motive they can play with your data security. Before selecting a cloud provider, ensure they are following security and regulatory compliance.





No comments:

Post a Comment