Infosecurity

1

comment

Cloud Security: The Identity Factor

By Patrick Harding The Problem with Passwords The average enterprise employee uses 12 userid/password pairs for accessing the many applications required to perform his or her job (Osterman Research 2009). It is unreasonable to expect anyone to create, regularly change (also a prudent security prac ...

Posted 10 March 2011 by Cloud Security Alliance (CSA)

tags: cloud, security, identity and access management

1

comment

Navigating Cloud Application Security: Myths vs. Realities

By Chris Wysopal Developers and IT departments are being told they need to move applications to the cloud and are often left on their own to navigate the challenges related to developing and managing the security of applications in those environments. Because no one should have to fly blind throug ...

Posted 08 March 2011 by Cloud Security Alliance (CSA)

tags: Cloud, Security, Application security

1

comment

Keeping Control in the Cloud

I had a great talk with Fred Donovan this week regarding cloud security. It's pretty clear that organizations of all kinds are very concerned about the risks (and the cost of those risks) when moving to adopt cloud services. It's also fair to say that the cloud providers are working diligentl ...

Posted 04 March 2011 by Geoff Webb

tags: Security, Cloud, Encryption

0

comments

Trusted Client to Cloud Access

By Vikas Jain Cloud computing has become an integral part of all IT decision making today across industries and geographies. This market is growing at a rapid pace. By 2014, IDC expects public cloud spending to rise to $29.5 billion growing at 21.6% per year. At the same time, Forrester predi ...

Posted 02 March 2011 by Cloud Security Alliance (CSA)

tags: cloud, security

0

comments

And the Thunder Rolls: All the Noise about Cloud and What that Means When Lightning Strikes

By Allen Allison Disaster Recovery (DR) and Business Continuity Planning (BCP) continue to be driving factors for some organizations looking to move to the cloud. Many are looking to manage their Disaster Recovery planning through extensive use of managed cloud services – and for good reasons ...

Posted 23 February 2011 by Cloud Security Alliance (CSA)

tags: cloud, security, diaster recovery, business continuity

0

comments

Top Six Security Questions Every CIO Should Ask a Cloud Vendor

By Ian Huynh Cloud computing has become an integrated part of IT strategy for companies in every sector of our economy. By 2012, IDC predicts that IT spending on cloud services will grow almost threefold, to $42 billion. So it’s no surprise that decision makers no longer wonder “if ...

Posted 23 February 2011 by Cloud Security Alliance (CSA)

tags: cloud, security

2

comments

Cloud, here we come!

Cloud, here we come! Or is it rather more a case of "We're already here, so make the best of it..."? I spent some time today talking to a good friend of mine who also happens to be the head of security for a large European financial services business. Unsurprisingly we got on to the ...

Posted 11 February 2011 by Geoff Webb

tags: Security, Cloud, Financial Services, EU Privacy, IaaS

0

comments

Quit Worrying About Cloud Security?

Well, it is not THAT easy but at least there are people starting to claim that it is not as hard as it seems to be sometimes. I stumbled across the following article: Why you can quit worrying about cloud security (thank you Jim), which makes a lot of interesting statements on how the US Federal Gov ...

Posted 04 February 2011 by Roger Halbheer

tags: cloud, security

0

comments

Extend the Enterprise into the Cloud with Single Sign-On to Cloud-Based Services

By Mark O’Neill In this blog post we examine how Single Sign-On from the enterprise to Cloud-based services is enabled. Single Sign-On is a critical component for any organization wishing to leverage Cloud services. In fact, an organization accessing Cloud-based services without Single ...

Posted 01 February 2011 by Cloud Security Alliance (CSA)

tags: cloud, security, single sign-on, identity and access management

4

comments

Dining in the Cloud

I enjoyed Matthew Gardener's blog this week on the potential for the re-emergence of security silos as a result of the growing move out into the cloud. I think he's right, of course. If you think of the emeregence of any number of technologies, from desktop computing, through client-server, t ...

Posted 28 January 2011 by Geoff Webb

tags: Cloud, Security

0

comments

Building a Secure Future in the Cloud

By Mark Bregman Cloud computing offers clear and powerful benefits to IT organizations of all sizes, but the path to cloud computing – please excuse the pun – is often cloudy. With cloud computing, IT resources can scale almost immediately in response to business needs and can be deliv ...

Posted 27 January 2011 by Cloud Security Alliance (CSA)

tags: cloud, security

0

comments

Moving to the Cloud? Take Your Application Security With You

By Bill Pennington Cloud computing is becoming a fundamental part of information technology. Nearly every enterprise is evaluating or deploying cloud solutions. Even as business managers turn to the cloud to reduce costs, streamline staff, and increase efficiencies, they remain wary about the secur ...

Posted 27 January 2011 by Cloud Security Alliance (CSA)

tags: cloud, application security

0

comments

Cybercrime as a Service – Our Future?

It is not really surprising that criminals will leverage the economy of Cloud Computing for their illegal purposes. Especially activities that consume a lot of processor power will be moved to the Cloud – like any other business. Some way back, there were discussions on how to leverage GPUs t ...

Posted 12 January 2011 by Roger Halbheer

tags: Cybercrime, Cloud

0

comments

The Cloud is Also Green

Yes, not only gray :-) Seriously, we commissioned a study to see what the impact of cloud computing is not only to efficiency but the the environment. Can you save CO2 by moving to the cloud? I think its something we do not look at often enough. As pictures say more than 1000 words, here you see th ...

Posted 22 November 2010 by Roger Halbheer

tags: Cloud, Environment, Green

0

comments

PCI and Breach Data

Last week the Verizon Risk Team released an interesting report in which, among other things, they compared breach result information against norms for PCI DSS compliance. I can't imagine anyone is really all that surprised to see that organizations suffering a serious breach also tended to ...

Posted 11 October 2010 by Geoff Webb

tags: PCI DSS, Cloud

0

comments

Customer Experience: Security Can Improve in the Cloud

Last week, when I was in South Africa, a partner of us pointed me to a very interesting paper by KPMG called Cloud computing: Australian lessons and experiences. What I like is, that a lot of the items I was recently raising, where actually reflected in quotes by customers of Cloud providers as well ...

Posted 28 September 2010 by Roger Halbheer

tags: Cloud

0

comments

Cloud Computing: Benefits and Risks of Moving Federal IT into the Cloud

July 1st: Scott Charney, Corporate Vice President Trustworthy Computing was testifying at a hearing of the House Committee on Oversight and Government Reform. Basically the hearing was on the benefits and risk of Cloud adoption for the US government. If you are interested in reading his full testimo ...

Posted 06 July 2010 by Roger Halbheer

tags: Cloud, Governments

0

comments

Identity in the Cloud

Kim Cameron, one of our key identity architects had an interesting presentation on identity in the cloud and a corresponding interview. Both are worth looking at if you are planning to move into the direction of the cloud. Especially as it is definitely one of the key challenges: This is Kim's pres ...

Posted 25 May 2010 by Roger Halbheer

tags: Cloud, Identity

1

comment

Outsourcing Insider Attack?

I know one or two other bloggers have spotted the following news piece too, notably Bruce Schneier, but it’s hard to pass up an opportunity to not only comment, but to draw some wider parallels with other market trends in IT. The BBC reported a few days ago that the good folks at Charlapally C ...

Posted 20 May 2010 by Geoff Webb

tags: Security, insider attack, sensitive data, cloud

1

comment

Insider Threat of Cloud Computing

Tonight I got this article forwarded to me: Afraid of outside cloud attacks? You're missing the real threat. David Linthicum (the author) claimed that if you are looking at the hackers attacking “your” cloud from the outside, you are missing the real problem as the insider threat is ...

Posted 11 March 2010 by Roger Halbheer

tags: Cloud

Tag Cloud

Bloggers

Blog

Members' Login

Not a member?