Infosecurity

0

comments

Plugging "Cloud Identity Leaks": Why Your Business Should Become an Identity Provider

By Mark O’Neill Most people have used the Facebook, Twitter, or Google Apps buttons located on websites to log into third-party services. This approach is useful within consumer IT as it enables the user to access various services via their own Facebook, Twitter or Google Apps passwords witho ...

Posted 15 May 2013 by Cloud Security Alliance (CSA)

tags: cloud computing, cloud security, identity, identity provider

0

comments

Identity Management Plays a Key Role in Mobile Device Management (MDM)

By Dan Dagnall As BYOD and other mobile device related initiatives take hold, sooner rather than later, identity management will once again be considered as an enforcement mechanism; and rightly it should. Identity and access management (IAM) has grown up over the years. Its early beginnings were ...

Posted 30 April 2013 by Cloud Security Alliance (CSA)

tags: cloud computing, MDM, identity, IAM, BYOD

0

comments

How to Adopt the Public Cloud While Attaining Private Cloud Control and Security

By Gerry Grealish Earlier this year, McKinsey & Company released an article titled “Protecting information in the cloud,” discussing the increased use of cloud computing by enterprises across several industries and the benefits and risks associated with cloud usage. The article reco ...

Posted 26 April 2013 by Cloud Security Alliance (CSA)

tags: cloud computing, public cloud, private cloud, encryption, encryption gateway

0

comments

Cloud-Based Identity Management: Best Practices for Rapid End-User Adoption

By Glenn Choquette Identity Management (IdM) is not new. Yet, after all this time on the market, organizations still have mixed results for end-user adoption, as many organizations that rolled-out IdM years ago still haven’t achieved their goals: end-users keep calling the help desk to reset ...

Posted 26 April 2013 by Cloud Security Alliance (CSA)

tags: identity, cloud computing, IdM

0

comments

Cloud APIs - the Next Battleground for Denial-of-Service Attacks

By Mark O’Neill In recent months, there have been a number of highly publicized cyber attacks on US banks. These attacks took the form of Distributed Denial of Service (DDoS) attacks, involving enormous amounts of traffic being sent to internet-facing banking services, rendering them unusable ...

Posted 13 April 2013 by Cloud Security Alliance (CSA)

tags: DDoS, API, cloud computing, mobile apps

0

comments

Going Up? Safety First, then Send your Data to the Cloud

By Joe Sturonas As the proliferation of data continues to plague businesses, the pressure is on for companies to migrate away from their physical data centers. Cloud computing is being adopted at a rapid rate because it addresses not only the costs for physical space, but also rising energy costs a ...

Posted 28 March 2013 by Cloud Security Alliance (CSA)

tags: cloud computing, compliance, encryption

0

comments

How to Harden Your APIs

By Andy Thurai The market for APIs has experienced explosive growth in recent years, yet the major issues that providers still face are protection and hardening of the APIs that they expose to users. In particular, when you are exposing APIs from a cloud-based platform, this becomes very difficult ...

Posted 26 March 2013 by Cloud Security Alliance (CSA)

tags: API, cloud computing, identity, encryption, tokenization

0

comments

Three Critical Features that Define an Enterprise-Grade Cloud Service

By David Baker The line between enterprise and consumer is fading as employees work from all manner of devices to access the on-premises, cloud and even consumer applications needed to get work done. But it’s important to not confuse enterprise and consumer services from a security standpoint ...

Posted 22 March 2013 by Cloud Security Alliance (CSA)

tags: cloud computing, encryption, CSA STAR

0

comments

Why Should I Get My Certificate of Cloud Security Knowledge (CCSK)? Or Train to be a CCSK Trainer?

“The CSA, in providing a set of goals through the CCSK, is challenging security practitioners to become the cloud thought-leaders we need today and tomorrow to ensure safe and secure cloud environments. In developing the CCSK, CSA is 'setting the bar' for security professionals and providing ...

Posted 20 March 2013 by Cloud Security Alliance (CSA)

tags: cloud computing, certification, training, professional development, CCSK

0

comments

The Shrinking Security Model: Micro-perimeters

By Ed King As cloud and mobile computing make enterprise IT ever more extended, the traditional security model of keeping the bad guys out and allowing only the good guys in no longer works well. While the reach of the enterprise has expanded, the security perimeter may actually have to shrink to ...

Posted 20 March 2013 by Cloud Security Alliance (CSA)

tags: authentication, SSO, cloud computing, API

2

comments

When Good Is Not Good Enough: NIST Raises the Bar for Cloud Data Protection Vendors

By David Stott Earlier this year, the US National Institute of Standards and Technology (NIST) released a publication titled Cloud Computing Synopsis & Recommendations (Special Publication 800-146) describing in detail the current cloud computing environment, explaining the economic opport ...

Posted 21 February 2013 by Cloud Security Alliance (CSA)

tags: cloud computing, NIST, encryption, SaaS, FIPS 140-2, tokenization

0

comments

Pirates in the Cloud

The FBI takedown of Megaupload one year ago was a PR fiasco, and quite possibly, a practical disaster for law enforcement and rights holders. The image of armed police storming a private function and holding a pregnant woman (Dotcom’s partner) at gunpoint – and preventing her calling for ...

Posted 10 January 2013 by Slack Alice

tags: cloud computing, Megaupload, Pirate Bay, Kim Dotcom

0

comments

The High Costs of Securing Identities: How to Fix the Problem Using the Cloud

By Dan Dagnall Identity management is well down the path of a mature market space. But I believe there is still one final, fundamental disconnect that is driving up the cost of deploying and maintaining an identity management solution, and that is programming and customization. For example, one c ...

Posted 26 October 2012 by Cloud Security Alliance (CSA)

tags: identity, cloud computing

0

comments

Context + Analytics = Good Security

By Jon-Louis Heimerl Data [dey-tuh] noun: individual facts or statistics Information [in-fer-mey-shuhn] noun: knowledge concerning a particular fact or circumstance When does data become consumable information? When we correctly manage security, we integrate security devices into our infrastr ...

Posted 17 October 2012 by Cloud Security Alliance (CSA)

tags: analytics, cloud computing, compliance, Big Data

0

comments

Removing Cloud Barriers in Europe

By David Stott No one is immune to the ever-changing technology forecast, but one constant (at least for the near future) appears to be global cloud cover. Cloud computing is arguably the most dominant theme on every enterprise’s IT list, but in Europe, it’s being met with some key cha ...

Posted 10 October 2012 by Cloud Security Alliance (CSA)

tags: cloud computing, Europe, data privacy, EU

1

comment

The Impact of Computing Power on Cryptography

By Eric Hay Advanced technology is a beautiful thing. Not only has it enabled the creation of new, more efficient methods of application delivery and data storage (the Cloud is a prime example), but it’s also helped propel the development of more sophisticated solutions for data protection as ...

Posted 21 September 2012 by Cloud Security Alliance (CSA)

tags: cryptography, cloud computing, supercomputing, encryption, tokenization

0

comments

7 Steps to Developing a Cloud Security Plan

By David Grimes In IT, the easiest way to stop a new technology or solution from being implemented is to raise a security red flag. As soon as someone mentions concerns around a new IT solution not being “secure” the project can come to a screeching halt. So as cloud infrastructure and ...

Posted 10 September 2012 by Cloud Security Alliance (CSA)

tags: cloud computing, cloud security

0

comments

Compliance in the Cloud

Earlier in the year Quocirca was asked a surprising question along these lines: “If we use a cloud-based storage service and there is a leak of personal data, who is responsible, us or them?” Make no mistake, the answer is, that regardless of how and where data is stored, the responsibil ...

Posted 30 August 2012 by Bob Tarzey

tags: cloud computing, compliance, EU Data Protection Directive, Data Protection Act

0

comments

Can You Be Sued for Using the Cloud?

By Gerry Grealish We all know that adopting the Cloud comes with some risks – security, reliability and scalability have, to-date, been the most popular complaints. But now, we can add a new one to the mix: litigation. Case in point, companies doing business in Australia, known for its strict ...

Posted 29 August 2012 by Cloud Security Alliance (CSA)

tags: cloud computing, cloud security, litigation, compliance and policy, tokenization, SaaS

1

comment

Is Crypto in the Cloud Enough?

By Jon-Michael C. Brook Box.net, DropBox, iCloud, SkyDrive, Amazon Cloud Drive... the list goes on for convenient cloud storage options. Some have had a security incident; the rest will. All implement some form of protection against accidental exposure with varying degrees of protection. Are these ...

Posted 27 August 2012 by Cloud Security Alliance (CSA)

tags: cloud computing, encryption

Tag Cloud

Bloggers

Blog

Members' Login

Not a member?