Powered By InformationWeek Business Technology Network
 
Welcome Guest. | Log In | Register | Membership Benefits

All News

Revamp Mobile Policy To Secure The Cloud  May 21, 2012
A majority of employees bring their own devices into work and connect out to the cloud -- now it's time to gain greater control over the security of these devices

Crypto In The Cloud Secures Data In Spite Of Providers  May 07, 2012
With companies increasingly worried about their data in the cloud, a number of providers have cropped up to offer various types of encryption

Microsoft Skype IP Leakage Not New, Report Contends  May 02, 2012
Microsoft says it is investigating a report of a vulnerability that can expose the IP addresses of Skype users

VMware Confirms Hacker Leaked Source Code For ESX Hypervisor  April 25, 2012
Officials at VMware have confirmed that source code posted on the Web by hacker is legitimate, but said customers may not necessarily be at risk

Insecure API Implementations Threaten Cloud  April 23, 2012
Web and cloud services allow third-party access by exposing application programming interfaces, but many developers and customers do not adequately secure the keys to the cloud and their data, experts say

Europe's Data Security Laws Clear Some Clouds, Muddle Others  April 09, 2012
Regulations being mulled over by the European Union will clarify security requirements for many cloud providers -- but could hurt U.S. providers

Malware Getting Backed Up Along With Data  April 09, 2012
Sourcefire data shows how often restoring from malware-contaminated backups reinfects organizations

Tracking And Measuring Cloud Providers' Security Performance  April 04, 2012
Is your cloud provider meeting its promises for security? Here are some tips for finding out

Vetting The Security Of Cloud Service Providers  March 26, 2012
A registry offered by the Cloud Security Alliance allows customers to compare the security measures of participating service providers. Is that enough to make cloud more secure?

How To Manage Identity In The Public Cloud  March 15, 2012
One of the toughest parts of using cloud services is learning how to provision (and de-provision) user access. Here are some tips to help get you started

Cloud Brokers Seek To Simplify, Secure Services  March 12, 2012
An original aim of the cloud was to simplify corporate infrastructure, but having a multitude of services has made networks complex and hard to manage. Can adding a third party make the cloud more secure?

Cloud's Future Security Depends On Mobile  February 27, 2012
Passwords are a major weakness for cloud providers. Industry experts say that, in the future, mobile will be the authentication platform of choice

Ambient Cloud Reduces Costs, Boosts Security  February 13, 2012
Distributed -- or ambient -- cloud storage requires that users chip in by providing disk space and gives them equivalent space in the cloud. Can storing others' data locally be secure?

Tech Insight: Penetration-Testing Your Cloud Provider  February 10, 2012
Vulnerability assessments and penetration tests can be a great way to validate the security posture of these organizations

Cloud Means More Secure Remote Access  January 30, 2012
Connecting hosts running remote-access services directly to the Internet is so last decade. Instead, companies look to move to cloud-enabled services or virtual desktop infrastructure.

Facebook Hit By Classic Worm Attack  November 29, 2011
Zeus Trojan spreads when user views 'photos,' Facebook now blocking malicious domains spreading the attack

Cloud Services Credentials Easily Stolen Via Google Code Search  November 09, 2011
After finding many cloud access credentials using simple code search, researchers conclude public cloud services are not safe for storing sensitive data

Security Still An Afterthought, Study Says  November 04, 2011
Despite widespread threats and breaches, most enterprises still ignore security issues when building new apps, Ernst & Young survey says

Most Execs Don't Feel They Can Secure Cloud Infrastructures  November 02, 2011
Two-thirds of IT pros don't believe cloud environments are as secure as premises environments

The Eight Traits Of Highly Successful Security Startups  October 27, 2011
Best security startups are those that are willing to take a chance, SINET study says; mobile, cloud security are top categories

Spam Gang Puts Up 80 URL-Shortening Service Sites  October 25, 2011
Symantec discovers spammers leaving their own URL-shortening services open to the public

Survey: Organizations Are Cloud-Conflicted  October 04, 2011
Symantec survey finds less than 20 percent of organizations worldwide have fully implemented cloud services

New Botnets Gaining Traction Across The Web, Study Says  September 08, 2011
Damballa report shows seven new botnets among the top ten largest; off-the-shelf construction kits dominate list

Salesforce To Announce Acquisition Of Crypto Provider  August 24, 2011
SaaS provider's purchase of Navajo Systems could allay concerns of some cloud skeptics, experts say

70 Percent Of Infected Consumer Machines Hit With Multiple Malware Types  August 09, 2011
New Sourcefire Immunet and ClamAV data provides snapshot of consumer malware threats



Cloud Security Reports

report Monitoring And Measuring Cloud Providers' Security Performance
There is no ignoring the cloud, which means that IT professionals must find ways to monitor and measure the performance of cloud providers. While moving even in part to a cloud model is a big change for many reasons, the most significant difference is a loss of direct control. Just as security groups often struggle with managing security inside a corporation when in a governance role, we struggle even more with governing the security of assets that no longer sit within our own data centers. The challenge is to develop and implement a strong governance model for these cloud offerings that ensures that security is part of the conversation.

report How to Manage Identity in the Public Cloud
Use of the public cloud for enterprise applications complicates what was already a complicated task: identity management. As companies increase their use of cloud-based applications, IT and security professionals must make some tough and far-reaching decisions about how to provision, deprovision and otherwise manage user access. This Dark Reading report examines the options and provides recommendations for determining which one is right for your organization.

report Spot Trouble In The Cloud: Adapting Security Monitoring & Incident Response.
Security monitoring, incident response and forensics are essential, even in the cloud. But the cloud by definition implies relinquishing at least some control, which can make these practices problematic. In this report, we identify the challenges of detecting and responding to security issues in the cloud and discuss the most effective ways to address them.

Other reports from the Cloud Security Tech Center:




Featured Webcasts
Featured Whitepapers
Featured Reports