- Microsoft Windows chief decries standards grandstanding
- The 5 best, and 5 worst, features of Google Chrome OS
- Federal government using PS3 to crack pedophile passwords
- 10G Ethernet cheat sheet
- Top 10 free Windows tools for IT pros, at a glance
Cloud Security|Cloud computing offers advantages over building and maintaining private data centers including flexibility, reduced maintenance and operations costs and the ability to employ lower powered, lower priced personal computers.
Anyone considering cloud computing and data security has to take pause at the colossal mistake at Microsoft/Danger over the weekend.
There’s no getting around that customer data was being stored in the cloud and it has disappeared, likely forever, so this is a cloud security issue.
While this is not the type service that businesses are likely to use, it still offers a lesson for businesses attracted to cloud services. That lesson is this: investigate the provider’s infrastructure.
The problem with the backup served by Danger to users of Sidekick phones has led to a big black eye for both Sidekick and T-Mobile, which provided the Danger service. Certainly they didn’t want their reputations undermined this way, and neither do the cloud providers businesses are likely to engage. But it happened.
If cloud storage is being used by a business, that business has to treat it as if it is its own, with concern about its architecture and how that architecture will insure availability and data integrity.
The Cloud Security Alliance has a working group looking into the security issues with cloud storage, and here is a list of questions it poses and that businesses should answer before signing with a provider.
= Do you know how your storage provider plans to ensure that your data is still reliable and available when your business needs it?
= Will you and your customers be able to trust the promises that all stored private and confidential information is protected?
= Does the geographical location of where the data being processed and stored matter?
= Is your data being securely stored and kept separate from the other residents in the data storage farm?
All the answers should be yes.
Tim Greene is senior editor at Network World.
Comments (5)
"... investigate the provider’s infrastructure"???By Anonymous on October 13, 2009, 1:56 pmif you can't trust microsoft's infrastructure who can you trust?
Reply | Read entire comment
"There’s no getting around that customer data was being stored iBy Anonymous on October 13, 2009, 2:10 pm"There’s no getting around that customer data was being stored in the cloud" Customer data was being stored on servers. "The cloud" has nothing to do with it. "While...
Reply | Read entire comment
DefinitelyBy tuomoks on October 13, 2009, 5:26 pmDefinitely correct from technical point of view but today the buzzword is "cloud", it has to be in any article, RFI, RFP, whatever. Otherwise the public and especially...
Reply | Read entire comment
"Cloud" is quite descriptive, actuallyBy Anonymous on October 14, 2009, 10:39 am"Cloud" is actually a very useful and very descriptive term. Storing my data in "the cloud" means "I have no !#$$ idea where or how my data is stored, I just trust...
Reply | Read entire comment
Danger DIdnt lose it, Microsoft did!By Anonymous on October 20, 2009, 12:24 pmDanger ceased to exist when Microsoft took over, so dont make like it was Danger's service that screwed up!
Reply | Read entire comment
View all comments