Cloud Computing Security
Posted by Matt Carroll on Thu, Aug 13, 2009 @ 12:41 PM
Cloud computing is a way of computing where resources such as infrastructure, platform and software are provided as a service over the Internet. A user usually uses a third party provider for the services needed and pay only for services that are being used. Examples of cloud computing include storing photos in a site like Flickr or Amazon's Elastic Compute Cloud. This type of computing is a cost effective option with the least amount of knowledge needed for the resources provided, but how secure is the option for you or your company.
The obvious risk of uploading your data to the internet is uncertainty of who has the access to this information no matter how large of a company is. The solution to such a problem is being smart on the information the customer uses. Before using a service on a cloud computing service, just think of the trouble it could possibly get you if this information were in the wrong hands.
Cloud Computing does provide the services anywhere the internet is connected and some services where the customer is not. This can also be a downfall of cloud computing as well as a positive attribute. To provide a service with almost 100% availability, cloud computing starts to become more expensive. If you need a reliable source at all times to access your information, cloud computing may not be best option.
When choosing a cloud computing provider, a customer should always ask questions regarding where their data is and the access given. The relationship should be strong between the provider and the customer. Some questions to ask to reduce security risks are:
- Do you do background checks for people with administrative access?
- Is the encryption process of data designed and tested by specialists?
- What will happen to your data is case of a disaster?
- Where or what jurisdiction is my data being held?
What can the customer can do when using these services to protect their data. Pick strong and different passwords for each service, so it cannot be easily solved. Do not reveal any sensitive information about yourself which includes address, social security number or bank statements. Also, avoid file sharing services with a reputation of pirated material. A wrong download of a file can lead to others seeing your computer's private material. Lastly, apply the latest security updates to all software which includes operating system, browser and antivirus program.
There should be transparency of a company when choosing a cloud computing service especially with the security of your data. The customer must weigh their options of convenience and productivity with security and sensitivity of data. The most important thing about cloud computing is knowing the danger of it.