The Security Issues Faced By Cloud Computing

Published Date: 02 Nov 2017

Introduction

Cloud computing can be defined as a method by which access to a shared collection of configurable computer resources, such as servers, services, applications and networks is readily available in a convenient and easy-to-use way for end users (Mell & Grance, 2011). Through cloud computing technology, the heavy load of hardware and software required by the user or business is reduced, and in turn handled by the network of computers that are part of the cloud. This allows users to use devices such as smartphones, laptops and more recently tablets to access data and applications through the provided services of the cloud computing platform (Furht & Escalante, 2010). In recent years, cloud computing has become a noteworthy technology trend that is rapidly changing the IT market and the process within it.

Cloud Computing Service Models

The services offered by a provider of the cloud can be classified into three distinct business models, which depend on the requirements of the business which will consume these services.

Infrastructure as a Service (IaaS) – Businesses are provided the capability to deploy software in the cloud, where networks, storage, processing and other related essential technical resources are provided by the provider. This may include certain applications and operating systems specified by the provider.

Platform as a Service (PaaS) – Businesses are provided the capability to deploy applications of a consumer-created or acquired nature through programming tools and languages supported by the provider onto the cloud.

Software as a Service (SaaS) – Businesses are provided the capability to utilise the applications running on an infrastructure provided by the provider, which can be accessed through smartphones, laptops and PDAs using a simple web browser.

Advantages of Cloud Computing

The use of cloud computing has many advantages for businesses:

The most significant advantage provided is the removal of investments by business on storage, quality control, software updates and stand-alone servers. By working in the cloud, the price of these factors can be reduced significantly, promoting cost efficiency in the long run.

The second advantage of working in the cloud provided businesses with an increase in the level of flexibility in terms of the scale of the organisation. Any organisation, whether it be big or small can use the cloud computing platform, as the cloud based servers designated to the organisation can be easily increased or decreased. This in turn also aids the environment, as only the required space is being utilised.

The third advantage provided by cloud computing is the level of security. Misplaced laptops or smartphones can lead to the loss of important information for a business, but with when using the cloud, all important information, as well as applications and software updates are securely stored and can be accessed and downloaded from any device, given the correct level of authorization. Given an internet connection, users can work from almost anywhere, allowing a sense of freedom.

Disaster recovery is also taken care of, as data that is accidently deleted can be quickly and easily recovered.

Working in the cloud allows an increased level of collaboration and document control. All important documents are available online, without the need to constant send changes back and forth through emails. Any changes made to these documents are instantly updated and can be seen by anyone who is viewing the document at the current point of time. Not only does this decrease the time spent tracking changes, but it also aids efficiency and productivity in the workplace.

Since the trend has become popular amongst major businesses, the number of vendors has also increased, providing a range of different options with different pricing plans.

Disadvantages of Cloud Computing

While having a number of advantages, cloud computing has several major disadvantages as well:

Unforeseen technical issues may affect the working of a business, which may range from connectivity to networking issues. Even the best providers will invariably have some technical difficulties that must be dealt with so.

Cloud computing hopes to reduce costs for business in the long run, but at the current point of time, providers are still purchasing or developing software and servers for the cloud. Those businesses who want to immediately switch to working in the cloud will customarily pay more than businesses who switch at a later point of time, when cloud computing is more common and widespread in the market.

As the technology behind the cloud is still relatively new and in the testing phase, it currently does not provide all the functionality and aspects that are expected. In time this will change through advancements in development and feedback from customers.

The most important disadvantage is the number of privacy and security issues faced by businesses, as they are in effect, handing over all of their sensitive information to a third party, i.e. the cloud service provider. Even though all of the data uploaded to the cloud is encrypted and there are added security measures to every account to ensure that unauthorised access is prevented, this still entails great risk on the part of the businesses, as the service provider is not responsible for the loss of any data uploaded to the cloud.

Security Issues Faced by Cloud Computing

Though cloud computing has recently been adopted by many businesses, early adopters and researchers in the field can provide us with some insight into the security issues faced by these organisations.

Data that is stored in the cloud is contained along with the data of many other organisations who have undertaken the services provided by the third party. This data must be encrypted in order to keep it secure from unauthorised access. Many providers make the mistake of keeping the encryption key alongside the data, for ease of access. Encryption is a priority for secure data, but such implementation, in fact, negates the use of encryption.

The physical location of data is another important aspect for businesses. Many organisations have no idea where their data is in fact, physically stored, and this can affect the level of security of the data in question. Countries in the EU have stricter laws against access to information, whereas laws such as the US Patriots Act in the United States of America allow government agencies access to sensitive files and data (Brodkin, 2009).

Access to uploaded data is another serious issue faced, as the number of hackers attempting to obtain data from the cloud has increased significantly (Sterling, 2013). It is important that organisation do their own research and discuss with the third party service provider whose services they deem fit to undertake. This includes information on hiring policies of network administrators and their level of access over the data that is stored in the cloud.

The provider chosen by a business should have a certain reputation for the field; such providers have a level of experience that is accumulated over many years and provide a sense of security. Majority of providers are subject to security certifications and external audits as a means of ensuring that they are up to date with the latest levels of security and best practice methods in the workplace. Many of the newer providers do not undertake such audits and possess such certifications, and organisations should ensure that this is not the case when entering a contractual agreement.

Providers of cloud computing services should have a clear guideline

Security Threats Faced by Cloud Computing & Counter-measures

Before adopting cloud computing strategies, organisations should understand the potential threats that may arise in doing so. This can aid them in making educated decisions to limit the level of risk that they face.

The loss of data is a major security threat that every organisation fears, as it can have an enormous impact. It can become compromised through an automatic or manual alteration or deletion, where a backup of the data is unavailable. Serious problems can arise if data that is used as a link between files becomes corrupt. Unauthorised access by users looking to steal sensitive information is a primary concern for businesses today, as it can permanently damage the reputation of the business and lead to a loss of trust in present customers. If this sensitive information is obtained by rival companies, core intellectual property has been lost, leading to monetary and competitive consequences.

To counter the loss of data, providers must analyse strong data protection, during the design as well as the implementation phase while simultaneously implement an API access control which is strong. Data must also be encrypted to safeguard the integrity of data while it is being uploaded or downloaded. Stored data must be safely segregated and maintained, and any deleted data must be permanently removed to make sure it cannot be accessed by unauthorised personnel. Through the contract with the provider, aspects such as the backup and recovery of lost data must be underlined so that the business is familiar with disaster recovery situations. Businesses can also specify that persistent media be cleared before uploading of data, with the vendor.

Large institutions like the University of Exeter have a vast number of staff and students, with an increase in number of the latter taking place every year. The implementation of cloud computing in such institutions requires certain security issues to be faced.