Analysis of security problems faced by enterprises adopting public cloud service

Considering the maturity of IT outsourcing services, enterprises will naturally choose public cloud computing services in order to achieve greater cost savings and resource utilization. That is not the case. The security questioning of public cloud services is the main reason why enterprises dare not adopt public cloud service. For most businesses, the risk of data security makes them very fearful.





This article will outline why companies should adopt public cloud services for better benefits, what are the key security issues and challenges facing public cloud services, and what to do in the overall security assessment framework to address the security challenges facing public cloud services.





first, there is no conclusive data to support the view that "public cloud services are weaker than the security mechanisms within the enterprise's internal data centers". In fact, cyber attacks and data-loss cases for big companies such as Google, Sony & RSA have shown that tighter corporate internal security mechanisms can also be breached or bypassed by tricky social traps. Especially since the ancient times, a weak link in the mechanism of information security prevention has not been repaired, that is, "Human Factors".





Although these vulnerabilities do not directly relate to the public cloud, most companies tend to place important data such as intellectual property in their own custody. So can the public cloud properly keep the intellectual property of the enterprise? Given the scalability, flexibility, and on-demand performance of the public cloud, the answer is yes.





federal agencies such as the United States, Singapore and many government agencies in Asia and Europe are early adopters of public cloud services, and they have also facilitated the rapid maturation of cloud security services by public cloud service providers. In many instances and specific security types, such as malware, viruses, and the protection of distributed denial of service attacks, public cloud security technologies have proven to be more effective at protecting data than within an enterprise's security defenses. Sony's defense against Loic DDoS attacks is a good example.





in short, the endless demand for Internet services from end users has begun to extend public cloud services to media entertainment, such as music, movies, social media and E-commerce.





Companies do not have time to continue watching. If the public cloud services that have been successfully adopted by many enterprises are not adopted, the risk of a decline in corporate competitiveness may be more severe. If the firm still needs more convincing evidence, ask Oracle's Larry Ellison, who used words like "meaningless", "crazy" and "idiotic" to describe cloud computing, and now decides to join the cloud. Is this evidence convincing?





However, not all types of enterprise data or services are suitable to be managed in a public cloud environment, but from a general risk assessment framework, the data security risks of the public cloud can be controlled at a level that can be accepted by most enterprises.





Know your cloud solution risk





Each enterprise's characteristics are different, and its security risks are based on the industry and operating environment. and the risk factors of the enterprise must be recorded and under management. Public cloud services also have their own unique security risks, which are different from traditional IT outsourcing, but are naturally linked to the technologies used by the public cloud. The following is a list of the risks of public cloud computing and the preparations that enterprises should make. 123 Next Page