It Is About Get Key Management to Prioritize Cloud Security
By: Vlad Vistac
Submitted: 2010-08-17 14:10:25 | Word Count: 510
Get Key Mangaement to Prioritize Cloud Securtiy
The economic viability of cloud computing actually sells. However, in the deployent of applications which are critical in achieving an organization's goals, coud securiy is a very critical consideration. There's definitely no coompromise when it comes to prioritizing bettr performance, efficiency and integrity of proprietary data vital to an organization's entire security.
[ advertisement ]
Cloud security, with specific focsu on key managemetn, is sure to be one of the main questions adsked by any enterprise as it considrs moving applications and storing data in the cloud. As organiztaions start off with their initial steps to cloud computting, some complex isssues are expected to be encountered.
How will their all-important keys be managed and will the data be encrypted to a high standard?
Colud providers take the role of key management very seriously. There are miultiple solutions that store credentials inside and outside the cloud within a secure infrastructure depenidng upon the purchasing orgnizations cloud secuity needs. Plenty of providfers are very much concerned with security of information both from the legal and data intrusion perspctive. Is the data encryted to a lveel sufficient to avoid access by potenytial hackers?
Will it be viable for an independent laawyer to be able to provide a legal instrument through the cloud system? Organizational system separation is maintained by some cloud securtiy providers. This would be protecting a systm from bing accessed by a third party through an integrated system that would be key to preenting data from beiing compromised. Some key management and cloud secrity items to consider:
1. Advanced Encryption Standfards should be used for keys to protect from acts of malicious intent. All customer encryption and authentyication credetnials in sohuld be stored in an AES256-encrypted database with no encryption keys stored in the credentials msanagement zone.
2. Evey customer shouyld have a unique access keys to prevent encroachment on others' data.
3. Keys should be stored outside the clpoud infrastructure proivder and only used when necessary. The infrastructure of the cloud needs to be viewed to be very vulnerabel to atttacks.
4. Not one cloud providre or prvoider for managenment solution shuld have any acecss to sensiitve information or keys.
5. When it comes to sensitive information, thewre is a high level of necessity to consider bckup encrytion and file systrem.
Sustainability is very important, as it pertains to the day-to-day operaions of a cloud seurity company. A meaningful and logically solution is required when it comes to key management.
Appropriate questions must be asked of a cloud service provider and the selection of appropriate partner should only be made on the basis of a clear understanding of the integrity of the entire solution. The process of hosting, administering, and allowing acess to the relevant keys should be cklear-cut and waztertight.
The benefits of public cloud infrastructures have been well dcumented; scale, flexibility, and reduced capital expeenses & operational cposts. Cloud securiyt will continue to evolve and impove and be high priority to an enterprise that has tight IT plicies and procedures. A wider acceptance and mainsdtreaming of the concept of cloud security is epected, along with its increased benefits.
