Cloud security, sometimes also known as the cloud computing security, is a set of services and/or technologies deployed both by cloud providers and cloud customers in order to protect data, applications and the rest of the infrastructure used on the cloud.
While it might not change the approach to security, cloud security has to address certain other areas by leveraging strict regulatory standards and certain security tools to keep the data as secure as possible.
As noted, cloud providers offer a variety of different service models, including Software as a service (SaaS), Platform as a Service (PaaS), application platform as a Service (aPaaS) or Infrastructure as a service (IaaS), as well as different deployment models, including private, public, hybrid or community cloud, all of which face certain security issues and different security applications.
Back in November of 2008, at the ISSA CISO Forum in Las Vegas, the Cloud Security Alliance (CSA), as the leading organization focused on security in cloud computing.
Back in October 2017, the Cloud Security Alliance (CSA) has released the “Treacherous 12: Top Threats to Cloud Computing” report, which outlined the top 12 threats to cloud computing security, including data breaches, insufficient identity credential access management, account hijacking, Denial of Service, various system vulnerabilities, Advanced Persistent Threats (APTs) and more.
The report also includes details on the business impacts of each of those security risks as well as a list of related CSA standards that were designed specifically to reduce the risk.
Plenty of reports and analysis agree that while cloud computing might look scary from the security side due to its scalability, and general dynamic, it pretty much offers the same level of security scalability and agility as the traditional server.
Those shifting to cloud computing have to work with cloud service providers in order to prevent, mitigate and minimize the risk of any cloud security attacks. Network administrators and IT professionals also have to understand their role in cloud security, separating it from security implementations done by the cloud service provider.
Cloud security and its future
Many companies offering cloud services, including Oracle, Amazon AWS, Microsoft, Cisco, and others, are focusing on Artificial Intelligence (AI) and Machine Learning (ML) to further extend its cloud security services.
With more and more companies reaping the benefits of cloud computing, the security has become a big issue, with plenty of companies focusing solely on cloud security.