{"id":2656,"date":"2011-12-28T07:00:19","date_gmt":"2011-12-28T15:00:19","guid":{"rendered":"http:\/\/www.formtek.com\/blog\/?p=2656"},"modified":"2011-12-28T07:00:19","modified_gmt":"2011-12-28T15:00:19","slug":"cloud-computing-security-can-the-cloud-ever-be-more-secure-than-on-premise","status":"publish","type":"post","link":"https:\/\/formtek.com\/blog\/cloud-computing-security-can-the-cloud-ever-be-more-secure-than-on-premise\/","title":{"rendered":"Cloud Computing Security: Can the Cloud Ever Be More Secure than On-Premise?"},"content":{"rendered":"
On one hand there is a widely held belief that, by its very nature, data stored in the cloud is not as secure as data managed on-premise.<\/div>\n
 <\/div>\n
That sentiment plays front and center with warnings like the one from\u00a0Francis Brown<\/a>, managing director at\u00a0Stach & Liu, who recently said <\/a>that\u00a0“companies are pushing forward on the cloud\u00a0because they want the functionality, but they’re not seeing the risk.” \u00a0Brown warned companies to stay away from the cloud because of the cloud’s inherent insecurities. \u00a0His findings were part of a presentation<\/a> called “Pulp Google Hacking: The Next Generation Search Engine Hacking Arsenal”.<\/div>\n
 <\/div>\n
But Brown’s contentions are not so much that there are glaring flaws with cloud security technology, but rather that, securing the cloud correctly isn’t \u00a0easy, and all too often human mistakes and laziness introduce insecurities\u00a0\u00a0in cloud implementations. \u00a0Brown’s presentation showed, for example, how access information and login credentials for networks and browser-based applications are often saved in text files by administrators and users and these files then get unknowingly picked up and exposed by Google and Bing search engines.<\/div>\n
 <\/div>\n
But others are beginning to say that problems like this could be avoided simply by selecting and working with reputable cloud vendors.<\/div>\n
 <\/div>\n
Harold Moss<\/a>, chief technology officer of cloud computing strategy at IBM, said<\/a> for example, that\u00a0\u201cthere\u2019s a misconception that the cloud is less secure than traditional IT environments. \u00a0The cloud can actually be more secure.\u201d \u00a0How can that be? \u00a0Moss primary reason to explain his thinking is that\u00a0vendors who specialize in the cloud \u00a0are more \u00a0likely to have superior security technology and expertise.<\/div>\n
 <\/div>\n
Paul Chisholm<\/a>, CEO of MindShift Technology, said that<\/a> “IT departments started moving to the cloud because of security reasons, for better disaster recovery and because they don\u2019t want the hassle of running all of their solutions themselves. \u00a0If you have an on-premise solution that is not managed properly then hackers can get to it. And it\u2019s subject to things like power outages. The cloud improves physical security dramatically. \u00a0And if you\u2019re a cloud provider you have to be up-to-date on security because hackers are always getting better. \u00a0I think overall the cloud is more secure than on-premise solutions<\/em>.”<\/div>\n
 <\/div>\n
Mary Beth Hamilton<\/a>, Director of Marketing at Eze Castle Integration, wrote that “when considering a move to the cloud, security is typically a hot topic and often a concern. In truth, a cloud infrastructure can be as secure\u2014or insecure\u2014as a traditional in-house infrastructure. It all comes down to the cloud architecture, security policies, management practices and the service provider\u2019s track-record and experience. “<\/div>\n
 <\/div>\n
J. Nicholas Hoover<\/a>, Senior Editor at InformationWeek, recently compiled a list<\/a> of high-ranking US government IT officials saying that cloud computing can be more secure than on-premise alternatives. \u00a0“The list of execs touting the security advantages of the cloud has grown to include federal CIO Steven VanRoekel<\/a>; Gen. Keith Alexander<\/a>, head of both the National Security Agency and U.S. Cyber Command; CIA CTO Gus Hunt<\/a>; NIST security researchers Peter Mell<\/a> and Dr. Ronald Ross<\/a>; and former NSA director Adm. Mike McConnell<\/a>.”<\/div>\n
 <\/div>\n
VanRoekel said <\/a>that “we cannot afford to make the false trade-off between cybersecurity and innovation. A lot of people will use cyber as a blanket excuse to not move forward, but I truly believe that moving to the cloud, and a move to the cloud of infrastructure application and other systems, done correctly, following NIST guidelines, eventually using FedRAMP, getting DHS monitoring established and others, can really make solutions in the government all more secure than we are today.”<\/div>\n
 <\/div>\n
General Alexander said <\/a>that “by shifting to a cloud architecture<\/em> the United States would save money and be better placed to protect vital computer networks.”<\/div>\n
 <\/div>\n
Ronald Ross said that “I think that at the end of the day, if you do an effective cloud deployment where you can reduce IT costs from 5 to 40 percent, that provides us a double benefit \u2013 reduced cost and complexity and better cybersecurity.”<\/div>\n
\"Digg<\/a><\/div>
\"Reddit<\/a><\/div>
\"Stumble<\/a><\/div>
\"Buzz<\/a><\/div>
\"Vote<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Kick<\/a><\/div>
\"Shout<\/a><\/div>
\"Share<\/a><\/div>
\"Bookmark<\/a><\/div>
\"Post<\/a><\/div>
\"Google<\/a><\/div><\/div>","protected":false},"excerpt":{"rendered":"

On one hand there is a widely held belief that, by its very nature, data stored in the cloud is not as secure as data managed on-premise.   That sentiment plays front and center with warnings like the one from\u00a0Francis…<\/span><\/p>\n

Read more ›<\/a><\/div>\n

<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[6,31],"tags":[],"class_list":["post-2656","post","type-post","status-publish","format-standard","hentry","category-cloud-computing","category-security"],"_links":{"self":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/2656","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/comments?post=2656"}],"version-history":[{"count":0,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/posts\/2656\/revisions"}],"wp:attachment":[{"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/media?parent=2656"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/categories?post=2656"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/formtek.com\/blog\/wp-json\/wp\/v2\/tags?post=2656"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}