Cloud Security Solutions

While cloud offers many unique opportunities, many companies are cautious due to security concerns inherent in the use of cloud.

Cloud Solutions

There are three main cloud solutions for business. The security issues and solutions needed depend on the solution implemented.

• Infrastructure as a service: Companies receive storage, network, processing, applications, and APIs from the provider.
  
• Software as a service: Companies gaining access to a provider’s application. They have little control over the network, servers, or storage and are buying access to the solution through a cloud based infrastructure.
  
•   Platform as a service: Companies install applications through middleware. Control over servers, storage and infrastructure is limited; however, companies do have control over applications.

Cloud Security Issues and solutions

There are numerous cloud security issues to consider when implementing cloud-based solutions, including:

• Access to sensitive data and information;
  
• Data and disaster recovery;
  
• Privacy;
  
• User accountability;
  
• Internal and external threats.

When implementing a cloud solution, businesses should ask your cloud service provider how they handle the following key elements:

• Internal infiltration: Information is often compromised by employees who pass it on to people outside of the company. To combat this businesses should consider restricting access to data.
  
• Data encryption: Since cloud is a shared environment breaches can occur when data is transferred. If data is critical or confidential businesses should ask their provider about their encryption process.
  
• Network security: Many cloud providers have been hacked recently, in addition to an increase in denial of service attacks. Businesses should learn what their provider does to protect their data from these attacks.
  
• Application security: This is where most attacks come from. Businesses should ask if their cloud provider protects against this threat.

A number of networking and security vendors provide solutions for cloud security:

• Cisco SecureX: This security framework helps companies protect their cloud infrastructure from attacks and breaches, defend against malware, and provide access to trusted users.
  
• IBM Cloud security: IBM offers end-to-end solutions and takes a holistic approach to cloud security. Some of the solutions offered by IBM are:
  
  + IBM security consulting;
  + Solution for reducing data risk include Optim Data Privacy Solutions, Proventia Virtualized Network Security Platform, Proventia Host Intrusion Prevention;
  + Rational AppScan for testing application vulnerabilities;
  + Compliance solutions such as Tivoli Identify and Access Assurance;
  + Security management solutions such as Tivoli Security Management and Federated Identity Management.
  

Other cloud security solution providers include:

• CloudLock
  
• Google
  
• Windows
  
• Novell
  
• Symantec
  
• RSA
  
• TrendMicro
  
• Verizon Business.

When it comes to finding a suitable cloud security provider, companies also need to make sure that they possess particular capabilities as part their solution.

• Scalability: Any security solution needs to be scaled to a company’s specific needs.
  
• Accessibility: Companies needs to have the ability to access cloud security services over the network.
  
• Access to metric: Companies needs to have access to metrics in order to track the success of their cloud security measures.