IT Security

Cloud difficulty

by Mark Rowe

Some IT professionals find it difficult to secure data in the cloud, according to survey results released by Lieberman Software Corporation, to coincide with European Cyber Security month. The survey, carried out at Microsoft Ignite, also found that 73pc of respondents prefer to keep their sensitive corporate data on premises, rather than in the cloud.

Philip Lieberman, President and CEO of Lieberman Software, pictured, said: “The cloud is ideal for businesses that need a cost effective, scalable and flexible means to transform their IT environments. Yet, IT professionals are still reluctant to put sensitive data in the cloud because they say it is difficult to secure. What organizations need to understand is that the same security problems they face on premises follow them into the cloud. Migrating to the cloud doesn’t mean they face any more or less security risk than keeping data on premises.”

He argues that attackers use the same automated cyber attacks on physical systems that they do on cloud-hosted systems. To succeed – whether inside the cloud or not – attackers need credentials. To gain these credentials, cyber criminals use tactics such as spear phishing and social engineering to circumvent traditional perimeter defenses like firewalls. Once inside the network, the attackers look for privileged credentials that allow them to move between systems and anonymously steal sensitive data.

Lieberman added: “A security solution that provides unique and frequently changing credentials for each privileged account ensures that even if an intruder steals a password, it is time-limited and cannot be used to jump from system to system on the network. And if this solution can be deployed in a cloud or hybrid environment, while also securing the credentials that underpin the administration of cloud portals themselves, we will see confidence in cloud security rise.”

For more on the survey see http://go.liebsoft.com/microsoft-ignite-survey-2016.

Newsletter

Subscribe to our weekly newsletter to stay on top of security news and events.

© 2024 Professional Security Magazine. All rights reserved.

Website by MSEC Marketing