Foreign information security experts: Cloud security concerns are exaggerated

According to foreign media reports, experts attending a subcommittee meeting at the RSA security conference this week said cloud security concerns were exaggerated. Now worry about cloud security is just like the worry of virtualization technology earlier. Concerns about security should not discourage businesses from using public cloud services. If you choose the right cloud service provider, most enterprise workloads and data can be safely migrated to the cloud environment.

The Subcommittee believes that at present, security concerns remain a major impediment to the application of cloud services by many large enterprises. This concern comes mainly from it executives considering migrating to cloud services. Corporate IT executives who have migrated to cloud services are largely satisfied with cloud security.

Intermap's survey of 250 medium-sized and large business decision-makers showed that 40% of respondents said security concerns were a major impediment to their application of cloud services. By contrast, only 15% of respondents who are familiar with cloud services are concerned about security issues.

Intermap said the analysis of the results of the survey showed that companies worried about cloud security could overestimate security risks. The respondents were less concerned about the performance and cost problems of companies that had applied cloud services.

A member of the subcommittee, Co3 Bae, chief technology officer, Bruce Schneier (Schneier), said the company first considered the level of security provided by cloud service providers. Cloud vendors offer different levels of security. The basic question is whether I trust my data on the hard disk of another legal entity. Making this transition is not difficult for it executives. Just as they must learn to trust hardware, software and outsourced vendors, corporate IT executives must start trusting cloud service vendors.

Wade Baker, head of research and intelligence at Verizon, said the popular view that the cloud itself was Wede Beck was wrong. The idea suggests that relationships with cloud services are untrustworthy or risky.

Security experts believe that, despite concerns about cloud security, there are few incidents of data theft after enterprise data is migrated to cloud services. In fact, most corporate data thefts involving cloud providers are caused by enterprise errors, not by cloud service provider errors.

The Committee pointed out that the question of how to deal with the Government's request to obtain data was resolved. Large cloud service providers such as Google and Microsoft are already taking steps to foster greater transparency. These big companies are better able to fight the government's demands in law than any other company.