Cloud Security @ Innotech (RAX + UT interview)
0 comments / Posted on 23. Oct, 2009 by Austin Startup in Enterprise
With more businesses using the cloud to store data, there has been an increased focus on security. Josh Zachry, systems security lead, Rackspace, and Jeff Reich, director of cloud security research, the University of Texas at San Antonio, will speak at 3:30 p.m. on this topic at Innotech Austin on Oct. 29. Zachry and Reich sat down with Matt Scherer to give an overview on this topic.
Question: What are the biggest challenges with cloud security?
Zachry: It really depends on the type of cloud offering (IaaS, PaaS, SaaS) and the way in which a cloud consumer or potential consumer plans to use the offering. Awareness seems to be a big challenge right now for both cloud providers and cloud consumers. Ultimately, cloud computing is a technology platform that does some things well and others not so well. It’s important for cloud consumers to make sure they are using a cloud computing solution appropriately. It’s also important for cloud providers to provide the needed information to consumers so they can make the right decisions.
Question: Is there a need for a single standard for cloud security?
Reich: This is a difficult question right now. I don’t believe there is a need for a single cloud security standard at this point in time. The reason for this is due to the differences in cloud computing platforms and the ways in which competing providers deliver and service those platforms. I believe that more discussion should focus on data and information that may be exposed within the different platforms (IaaS, PaaS, SaaS) and guidelines for protecting the confidentiality, integrity and availability of the data in question.
Question: What kind of issues do security professionals need to address to protect a cloud database?
Zachry: It depends on a number of factors. For example, the types of information or data stored in the database (this will drive a number of protection requirements). Also, the authentication solution used (SSL, API, VPN, etc). Again, it really depends on the types of data and information being stored.
Question: Is there anything else we should know about the future of
cloud security?
Reich: Cloud computing security will continue to be an important and dynamic topic. Cloud computing promises great capabilities and efficiencies at a reduced price. This naturally compels individual consumers and businesses to leverage cloud computing solutions for needed computing capabilities. What must not be ignored, however, is that cloud computing is prescriptive at this point. It’s important that everyone become engaged and learn more about cloud computing capabilities.
 |
Posted by Austin Startup
http://www.austinstartup.com |