Welcome!

Agile Computing Authors: Ed Featherston, Yeshim Deniz, Pat Romanski, Elizabeth White, Paul Simmons

Related Topics: @CloudExpo, Java IoT, Microservices Expo, Containers Expo Blog

@CloudExpo: Article

The Four-Way Stop at the Cloud Security Crossroads

Will cloud security provisioning and protection keep pace with the general state of cloud data over the next five years?

Cloud security is in a state of flux. Actually it's not really, but discussion is rife across the industry regarding the general state of cloud data and application welfare. Questions flutter around whether particular services are secure, whether multi-tenant clouds can be locked down and whether "spun down" instances of cloud servers will remain secure so that old customer data is deleted and non-accessible.

Where are we headed with the general consensus on cloud security just now?

A Cloud Is Just a Server
Of course we should start out from first principles and look to comments made the big name cloud providers who have pointed out that the cloud is only as secure as the controls you place upon it, i.e., virtualized hosting services do not come with "security included" as some sort of free gift... and so a cloud server is really just a server but delivered as a service.

How do we now move to mitigate risks in any given cloud deployment scenario and at what point do we bring the shielding defenses to bear upon the data that we seek to protect? Should we look to endpoint security controls as a primary security consideration, or should we focus on network back doors themselves, or both?

Companies such as F5 Networks appear to already be working at the IP address layer to provide more tailored network architectures with better "resource visibility" as applications need to deal with the daily duress of real-world data flows.

Are IP intelligence and application delivery controls enough? These technologies seek to champion the "automation" of application protection mechanisms where they may be enforced. Vendors in this space are also fond of talking about "contextual awareness," i.e., not just for applications so that they can gauge user requirements more intuitively, but also for cloud network traffic controls that can identify and filter data via a Content Delivery Network (CDN) if it appears to be malicious.

The Basic Facts Are...
In basic terms, we have a multiplicity of application controls, data transport vectors and network gateways to deal with in a global cloud computing environment that is barely sure enough of itself to settle on one single agreed set of open architectural standards.

Julian Lovelock of identity assurance and authentication specialist company ActivIdentity sees four "roads" for data travel down in the cloud. Each of these virtual crossroad paths may give us some clues as to the best route to deliver an Identity and Access Management (IAM) solution he says.

  1. Open Access: Data is accessible on the public Internet where usernames and passwords are managed by SaaS providers - it's argued this solution offers the "least amount of protection for your data" with minimal control.
  2. Behind the VPN: This option enables remote users to first authenticate to the VPN (most likely via a One Time Password [OTP[ solution), then enter username and password.
  3. Federated Identity Management: The user authenticates to a central portal through which he gains access to multiple applications.
  4. Native Strong Authentication: Strong authentication deployed separately in each individual cloud software application.

ActivIdentity's laying down of these four crossroad paths is unlikely to be an exhaustive future-proofed definition of the complete who, when, why, what and where of how we need to approach this issue, but it's arguably a pretty good starting point in an arena largely bereft of clear definitive statements in this vein.

We must also look to the multifarious nature of threats that can develop here from Advanced Persistent Threats (APTs), to ad hoc hacking and onward to attacks that may originate from internal or former employees. While security vendors in this space would like us to believe that solutions do exist that don't compromise on usability or convenience in the face of the Bring Your Own Device (BYOD) phenomenon, to place complete trust in any perimeter defense at this stage still requires what appears to be a considerable leap of blind faith.

Are we being too skeptical and cynical here by far? HP's approach to cloud security appears to be somewhat more open ended than some; the firm's central cloud security portal says upfront that it exists to try and "determine future cloud computing requirements" as well as data center and application design principles.

Open Research Has the Answer
The answer to our worries and concerns in this space will most likely not come from any single vendor or solution provider of any kind. The real answers many purists would argue are most likely to come from lab research collaborations such as the Gnosis process simulation language and tool that seek nothing more than the truth without and brand-driven agenda.

Will cloud security provisioning and protection keep pace with the general state of cloud data and application hosting over the next five years? The answer is that is has to - otherwise we will fail to grasp the wider and deeper benefits of virtualization as they exist in full.

•   •   •

This post was first published on the Enterprise CIO Forum.

More Stories By Adrian Bridgwater

Adrian Bridgwater is a freelance journalist and corporate content creation specialist focusing on cross platform software application development as well as all related aspects software engineering, project management and technology as a whole.

Comments (0)

Share your thoughts on this story.

Add your comment
You must be signed in to add a comment. Sign-in | Register

In accordance with our Comment Policy, we encourage comments that are on topic, relevant and to-the-point. We will remove comments that include profanity, personal attacks, racial slurs, threats of violence, or other inappropriate material that violates our Terms and Conditions, and will block users who make repeated violations. We ask all readers to expect diversity of opinion and to treat one another with dignity and respect.


@ThingsExpo Stories
The Founder of NostaLab and a member of the Google Health Advisory Board, John is a unique combination of strategic thinker, marketer and entrepreneur. His career was built on the "science of advertising" combining strategy, creativity and marketing for industry-leading results. Combined with his ability to communicate complicated scientific concepts in a way that consumers and scientists alike can appreciate, John is a sought-after speaker for conferences on the forefront of healthcare science,...
Data is the fuel that drives the machine learning algorithmic engines and ultimately provides the business value. In his session at Cloud Expo, Ed Featherston, a director and senior enterprise architect at Collaborative Consulting, discussed the key considerations around quality, volume, timeliness, and pedigree that must be dealt with in order to properly fuel that engine.
Explosive growth in connected devices. Enormous amounts of data for collection and analysis. Critical use of data for split-second decision making and actionable information. All three are factors in making the Internet of Things a reality. Yet, any one factor would have an IT organization pondering its infrastructure strategy. How should your organization enhance its IT framework to enable an Internet of Things implementation? In his session at @ThingsExpo, James Kirkland, Red Hat's Chief Archi...
The current age of digital transformation means that IT organizations must adapt their toolset to cover all digital experiences, beyond just the end users’. Today’s businesses can no longer focus solely on the digital interactions they manage with employees or customers; they must now contend with non-traditional factors. Whether it's the power of brand to make or break a company, the need to monitor across all locations 24/7, or the ability to proactively resolve issues, companies must adapt to...
In his keynote at 18th Cloud Expo, Andrew Keys, Co-Founder of ConsenSys Enterprise, provided an overview of the evolution of the Internet and the Database and the future of their combination – the Blockchain. Andrew Keys is Co-Founder of ConsenSys Enterprise. He comes to ConsenSys Enterprise with capital markets, technology and entrepreneurial experience. Previously, he worked for UBS investment bank in equities analysis. Later, he was responsible for the creation and distribution of life settl...
Organizations planning enterprise data center consolidation and modernization projects are faced with a challenging, costly reality. Requirements to deploy modern, cloud-native applications simultaneously with traditional client/server applications are almost impossible to achieve with hardware-centric enterprise infrastructure. Compute and network infrastructure are fast moving down a software-defined path, but storage has been a laggard. Until now.
In his general session at 19th Cloud Expo, Manish Dixit, VP of Product and Engineering at Dice, discussed how Dice leverages data insights and tools to help both tech professionals and recruiters better understand how skills relate to each other and which skills are in high demand using interactive visualizations and salary indicator tools to maximize earning potential. Manish Dixit is VP of Product and Engineering at Dice. As the leader of the Product, Engineering and Data Sciences team at D...
DXWorldEXPO LLC announced today that the upcoming DXWorldEXPO | CloudEXPO New York event will feature 10 companies from Poland to participate at the "Poland Digital Transformation Pavilion" on November 12-13, 2018.
Digital Transformation is much more than a buzzword. The radical shift to digital mechanisms for almost every process is evident across all industries and verticals. This is often especially true in financial services, where the legacy environment is many times unable to keep up with the rapidly shifting demands of the consumer. The constant pressure to provide complete, omnichannel delivery of customer-facing solutions to meet both regulatory and customer demands is putting enormous pressure on...
The best way to leverage your CloudEXPO | DXWorldEXPO presence as a sponsor and exhibitor is to plan your news announcements around our events. The press covering CloudEXPO | DXWorldEXPO will have access to these releases and will amplify your news announcements. More than two dozen Cloud companies either set deals at our shows or have announced their mergers and acquisitions at CloudEXPO. Product announcements during our show provide your company with the most reach through our targeted audienc...
JETRO showcased Japan Digital Transformation Pavilion at SYS-CON's 21st International Cloud Expo® at the Santa Clara Convention Center in Santa Clara, CA. The Japan External Trade Organization (JETRO) is a non-profit organization that provides business support services to companies expanding to Japan. With the support of JETRO's dedicated staff, clients can incorporate their business; receive visa, immigration, and HR support; find dedicated office space; identify local government subsidies; get...
DXWorldEXPO LLC announced today that All in Mobile, a mobile app development company from Poland, will exhibit at the 22nd International CloudEXPO | DXWorldEXPO. All In Mobile is a mobile app development company from Poland. Since 2014, they maintain passion for developing mobile applications for enterprises and startups worldwide.
@DevOpsSummit at Cloud Expo, taking place November 12-13 in New York City, NY, is co-located with 22nd international CloudEXPO | first international DXWorldEXPO and will feature technical sessions from a rock star conference faculty and the leading industry players in the world.
"Akvelon is a software development company and we also provide consultancy services to folks who are looking to scale or accelerate their engineering roadmaps," explained Jeremiah Mothersell, Marketing Manager at Akvelon, in this SYS-CON.tv interview at 21st Cloud Expo, held Oct 31 – Nov 2, 2017, at the Santa Clara Convention Center in Santa Clara, CA.
As data explodes in quantity, importance and from new sources, the need for managing and protecting data residing across physical, virtual, and cloud environments grow with it. Managing data includes protecting it, indexing and classifying it for true, long-term management, compliance and E-Discovery. Commvault can ensure this with a single pane of glass solution – whether in a private cloud, a Service Provider delivered public cloud or a hybrid cloud environment – across the heterogeneous enter...
DXWorldEXPO LLC announced today that ICC-USA, a computer systems integrator and server manufacturing company focused on developing products and product appliances, will exhibit at the 22nd International CloudEXPO | DXWorldEXPO. DXWordEXPO New York 2018, colocated with CloudEXPO New York 2018 will be held November 11-13, 2018, in New York City. ICC is a computer systems integrator and server manufacturing company focused on developing products and product appliances to meet a wide range of ...
More and more brands have jumped on the IoT bandwagon. We have an excess of wearables – activity trackers, smartwatches, smart glasses and sneakers, and more that track seemingly endless datapoints. However, most consumers have no idea what “IoT” means. Creating more wearables that track data shouldn't be the aim of brands; delivering meaningful, tangible relevance to their users should be. We're in a period in which the IoT pendulum is still swinging. Initially, it swung toward "smart for smart...
Headquartered in Plainsboro, NJ, Synametrics Technologies has provided IT professionals and computer systems developers since 1997. Based on the success of their initial product offerings (WinSQL and DeltaCopy), the company continues to create and hone innovative products that help its customers get more from their computer applications, databases and infrastructure. To date, over one million users around the world have chosen Synametrics solutions to help power their accelerated business or per...
Dion Hinchcliffe is an internationally recognized digital expert, bestselling book author, frequent keynote speaker, analyst, futurist, and transformation expert based in Washington, DC. He is currently Chief Strategy Officer at the industry-leading digital strategy and online community solutions firm, 7Summits.
In an era of historic innovation fueled by unprecedented access to data and technology, the low cost and risk of entering new markets has leveled the playing field for business. Today, any ambitious innovator can easily introduce a new application or product that can reinvent business models and transform the client experience. In their Day 2 Keynote at 19th Cloud Expo, Mercer Rowe, IBM Vice President of Strategic Alliances, and Raejeanne Skillern, Intel Vice President of Data Center Group and ...