Cloud

10/24/2017
10:10 AM
50%
50%

One-Third of Businesses Can't Keep Up with Cloud Security

One in three organizations cannot maintain security as cloud and container environments expand.

The growth of cloud and container environments is causing major problems for one-third of organizations who report they cannot keep up with changes in customers' security and compliance requirements.

Threat Stack and the Enterprise Strategy Group partnered to explore cloud security challenges in their "Cloud Security Report 2017: Security at Speed and Scale." They found 57% of 167 respondents report "significant delays" in sales due to trouble meeting customers' security standards, and 59% have the same problem with customers' compliance requirements.

Businesses' mounting concerns are not impeding container adoption, however: More than 40% have deployed containerized product applications, and 45% intend to test or deploy within the next year. Nearly all (94%) say containerization has a negative impact on security.

Researchers found hybrid environments are becoming more popular. Sixty percent of respondents plan to use a single cloud provider "for the foreseeable future" and 40% say they will have hybrid environments within twelve months.

Read more details here.

Join Dark Reading LIVE for two days of practical cyber defense discussions. Learn from the industry’s most knowledgeable IT security experts. Check out the INsecurity agenda here.

Dark Reading's Quick Hits delivers a brief synopsis and summary of the significance of breaking news events. For more information from the original source of the news item, please follow the link provided in this article. View Full Bio

Comment  | 
Print  | 
More Insights
Comments
Newest First  |  Oldest First  |  Threaded View
Page 1 / 2   >   >>
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
10/26/2017 | 11:35:12 AM
Container and data Security
 

Data has to be encrypted in all cases, so containers do not really pose any additional risks to the data.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
10/26/2017 | 11:34:37 AM
Re: Containers
" nowadays network proximity is a major factor."That is true, this may increase Inshoring. I also think network proximity will be covered in another way such a WAN optimization.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
10/26/2017 | 11:31:42 AM
Re: Containers
" Tech Empire of the World - Bangalore - and cheaper-faster-better too.  "

Yes, I know a few friends who are working there. I see your point tough.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
10/26/2017 | 11:29:58 AM
Re: Containers
"ill-informed execs make hasty purchasing and implementation decisions"

I would agree with this too. I would think it is because of the pressure in the market, everybody uses containers, let us use it too mentality. However I see benefits of containers for certain environment.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
10/26/2017 | 11:27:32 AM
Re: Containers
" Rapidly jumping into the cloud is a poor choice"

I would agree with that. There has to be proper mechanism in place for bot security and stability point of view.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
10/26/2017 | 11:26:17 AM
Re: Containers
"I'm curious to what extent this is inherent to containerization and to what extent it's a more a matter of complexity and lack of diligence."

Agree. I am not getting this part either.
Dr.T
50%
50%
Dr.T,
User Rank: Ninja
10/26/2017 | 11:24:56 AM
Container Security
There is no reason why containers should be unsecure if implemented properly. Security has to be put in place before it comes to the container, nothing different than how you would secure a virtual machine.
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
10/26/2017 | 8:23:55 AM
Re: Containers
Interestingly, the trend to digital transformation may help to reverse the offshoring trend because nowadays network proximity is a major factor.

But then, even if that's so, expect it to re-reverse as more service-provider and content-delivery network gateways proliferate globally.
REISEN1955
50%
50%
REISEN1955,
User Rank: Ninja
10/25/2017 | 10:43:06 AM
Re: Containers
And do not forget the additional layer of complexity that American management believes that ALL IT issues can be managed from the Tech Empire of the World - Bangalore - and cheaper-faster-better too.  
Joe Stanganelli
50%
50%
Joe Stanganelli,
User Rank: Ninja
10/25/2017 | 9:30:36 AM
Re: Containers
Indeed. The tech specifics may be different, but things haven't changed much over the decades. Enterprise technologies get hyped, ill-informed execs make hasty purchasing and implementation decisions, and then fundamentals at the orchestration layer suffer.
Page 1 / 2   >   >>
Crowdsourced vs. Traditional Pen Testing
Alex Haynes, Chief Information Security Officer, CDL,  3/19/2019
New Mirai Version Targets Business IoT Devices
Dark Reading Staff 3/19/2019
Register for Dark Reading Newsletters
White Papers
Video
Cartoon Contest
Write a Caption, Win a Starbucks Card! Click Here
Latest Comment: Reading Schneier's Friday Squid Blog again?
Current Issue
5 Emerging Cyber Threats to Watch for in 2019
Online attackers are constantly developing new, innovative ways to break into the enterprise. This Dark Reading Tech Digest gives an in-depth look at five emerging attack trends and exploits your security team should look out for, along with helpful recommendations on how you can prevent your organization from falling victim.
Flash Poll
The State of Cyber Security Incident Response
The State of Cyber Security Incident Response
Organizations are responding to new threats with new processes for detecting and mitigating them. Here's a look at how the discipline of incident response is evolving.
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2019-6149
PUBLISHED: 2019-03-18
An unquoted search path vulnerability was identified in Lenovo Dynamic Power Reduction Utility prior to version 2.2.2.0 that could allow a malicious user with local access to execute code with administrative privileges.
CVE-2018-15509
PUBLISHED: 2019-03-18
Five9 Agent Desktop Plus 10.0.70 has Incorrect Access Control (issue 2 of 2).
CVE-2018-20806
PUBLISHED: 2019-03-17
Phamm (aka PHP LDAP Virtual Hosting Manager) 0.6.8 allows XSS via the login page (the /public/main.php action parameter).
CVE-2019-5616
PUBLISHED: 2019-03-15
CircuitWerkes Sicon-8, a hardware device used for managing electrical devices, ships with a web-based front-end controller and implements an authentication mechanism in JavaScript that is run in the context of a user's web browser.
CVE-2018-17882
PUBLISHED: 2019-03-15
An Integer overflow vulnerability exists in the batchTransfer function of a smart contract implementation for CryptoBotsBattle (CBTB), an Ethereum token. This vulnerability could be used by an attacker to create an arbitrary amount of tokens for any user.