{"id":24049,"date":"2015-06-29T15:00:00","date_gmt":"2015-06-29T15:00:00","guid":{"rendered":"https:\/\/grapevinemsp.com\/2015\/06\/29\/security-threats-from-cloud-service-providers\/"},"modified":"2015-06-29T15:00:00","modified_gmt":"2015-06-29T15:00:00","slug":"security-threats-from-cloud-service-providers","status":"publish","type":"post","link":"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/","title":{"rendered":"Security Threats from Cloud Service Providers"},"content":{"rendered":"

\"security_threats_from_clo_69660_131368\"The cloud-related threats of 2013 are still around today. \u201cThe Notorious Nine; Cloud Computing Top Threats in 2013\u201d was published by the Cloud Security Alliance (CSA) and is updated regularly, according to the CSA website. This document is touted as a way to assist companies in making risk management decisions about their cloud strategies. As recently as February 2015, with the theft of data by an employee of a major lending institution, data security remains at the forefront of many businesses, and with the advent and use of cloud computing, organizations are perhaps even more aware of the need for security.<\/p>\n

While cloud has allowed businesses to take advantage of more IT services and lowered IT costs while making businesses more flexible, data protection is the number one cloud concern. Remember that the cloud environment is essentially shared infrastructure with sophisticated \u201cinsiders\u201d who are capable of viewing your company\u2019s sensitive data if your company is without adequate internal controls and adequate protection by third-party providers.<\/p>\n

The Notorious Nine<\/strong><\/p>\n

The CSA has identified cloud security threats as: 1) data breaches, 2) data loss, 3) account hijacking, 4) insecure APIs, 5) denial of service, 6) malicious insiders, 7) abuse of cloud services, 8) insufficient due diligence and 9) shared technology.<\/p>\n

Data Breaches<\/strong><\/p>\n

Data breaches remain the number one security threat on the CSA\u2019s list. This is because of the shared tenancy of cloud servers. If a multi-tenant cloud service database has design flaws, one single flaw in any one client\u2019s application could allow a malicious insider to gain access to every client\u2019s data. Encryption seems to be the answer, but keeping the encryption key is the key, so to speak. If the key is lost, so are your data. This leads to the second greatest threat; data loss.<\/p>\n

Data Loss<\/strong><\/p>\n

Data loss comes from many sources, but the main ones are the activities of a hacker and a natural disaster. This may be an unavoidable consequence from, say, a fire, but your company should perform a thorough check of the cloud service\u2019s strategy for data loss (as well as your company\u2019s own internal controls) before implementing a cloud service.<\/p>\n

Account or Service Hijacking<\/strong><\/p>\n

The third security risk on the CSA list is account or service hijacking. If your account is hijacked, an attacker may gain access to your company\u2019s credentials, can eavesdrop on activities and transactions, manipulate data, falsify information and return it or redirect your clients to illegitimate websites. One way to defend against this security risk is to prohibit sharing of account credentials between users and services and to have two-factor authentication techniques, according to the CSA.<\/p>\n

Insecure API\u2019s<\/strong><\/p>\n

Fourth on the list is insecure interfaces and APIs, which are integral to security. Some organizations and third parties build on these interfaces, introducing a whole new complexity of layers to the API. This increases risk as companies release credentials to these third parties, potentially exposing confidential information and risking the integrity of the system. Advice from the CSA is for companies to understand security implications.<\/p>\n

Denial of Service<\/strong><\/p>\n

This security threat is number five on the CSA list, which centers around 24\/7 availability of one or more services. Outages can cause an increase in prices, or hackers may succeed in causing your company to consume too much processing time and thus increase expense.<\/p>\n

Malicious Insiders<\/strong><\/p>\n

Although number six on the list, companies tend to be very concerned with this breach of data protection. The insider could be an employee (current or former), contractor or other person who gains access to your company\u2019s system, network or data. Encryption is probably the best way to deter a malicious insider, as long as the key is kept away from the potential malicious insider(s).<\/p>\n

Cloud Abuse<\/strong><\/p>\n

This could mean different things, but prime examples are someone using the cloud to break encryption keys or using the servers to propagate malware.<\/p>\n

Insufficient Due Diligence<\/strong><\/p>\n

It is imperative that your company fully understand the cloud environment with which you are thinking of dealing and its associated risks. Not only are contractual issues important, but also operational and architectural issues. Make sure the cloud service has sufficient resources for your company\u2019s needs.<\/p>\n

Shared Technology<\/strong><\/p>\n

This security threat is one of vulnerability. This is simply because cloud service providers share infrastructure, platforms and applications. As a result, if something is compromised within the cloud service system, there is potential threat of breach. The CSA recommends as a defense coming up with an in-depth strategy including, for example, storage and constant monitoring, in the event a cloud problem is detected.<\/p>\n

The Notorious Nine are still alive and well in cloud life, and defensive strategies should be implemented prior to moving your company\u2019s data onto the cloud server. Included in your list of defensive strategies should be a thorough due diligence of both the cloud service controls and your company\u2019s internal controls. The key is to take all steps to protect your company\u2019s sensitive data, before you engage a cloud service.<\/p>\n","protected":false},"excerpt":{"rendered":"

The cloud-related threats of 2013 are still around today. \u201cThe Notorious Nine; Cloud Computing Top Threats in 2013\u201d was published by the Cloud Security Alliance (CSA) and is updated regularly, according to the CSA website. This document is touted as a way to assist companies in making risk management decisions about their cloud strategies. As […]<\/p>\n","protected":false},"author":5,"featured_media":24050,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[7],"tags":[],"yoast_head":"\nSecurity Threats from Cloud Service Providers<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Security Threats from Cloud Service Providers\" \/>\n<meta property=\"og:description\" content=\"The cloud-related threats of 2013 are still around today. \u201cThe Notorious Nine; Cloud Computing Top Threats in 2013\u201d was published by the Cloud Security Alliance (CSA) and is updated regularly, according to the CSA website. This document is touted as a way to assist companies in making risk management decisions about their cloud strategies. As […]\" \/>\n<meta property=\"og:url\" content=\"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/\" \/>\n<meta property=\"og:site_name\" content=\"The Valley\u2019s Leading IT Company I Grapevine MSP\" \/>\n<meta property=\"article:published_time\" content=\"2015-06-29T15:00:00+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2015\/06\/security_threats_from_clo_69660_131368.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"300\" \/>\n\t<meta property=\"og:image:height\" content=\"225\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Cloudways\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Cloudways\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":[\"Article\",\"BlogPosting\"],\"@id\":\"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/\"},\"author\":{\"name\":\"Cloudways\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/person\/bd59bb9722808d3e8b3339137e9e3828\"},\"headline\":\"Security Threats from Cloud Service Providers\",\"datePublished\":\"2015-06-29T15:00:00+00:00\",\"dateModified\":\"2015-06-29T15:00:00+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/\"},\"wordCount\":838,\"publisher\":{\"@id\":\"https:\/\/grapevinemsp.com\/#organization\"},\"image\":{\"@id\":\"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2015\/06\/security_threats_from_clo_69660_131368.jpg\",\"articleSection\":[\"News\"],\"inLanguage\":\"en-US\"},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/\",\"url\":\"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/\",\"name\":\"Security Threats from Cloud Service Providers\",\"isPartOf\":{\"@id\":\"https:\/\/grapevinemsp.com\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2015\/06\/security_threats_from_clo_69660_131368.jpg\",\"datePublished\":\"2015-06-29T15:00:00+00:00\",\"dateModified\":\"2015-06-29T15:00:00+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/#primaryimage\",\"url\":\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2015\/06\/security_threats_from_clo_69660_131368.jpg\",\"contentUrl\":\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2015\/06\/security_threats_from_clo_69660_131368.jpg\",\"width\":300,\"height\":225,\"caption\":\"security threats from clo 69660 131368\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/grapevinemsp.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Security Threats from Cloud Service Providers\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/grapevinemsp.com\/#website\",\"url\":\"https:\/\/grapevinemsp.com\/\",\"name\":\"The Valley\u2019s Leading IT Company I Grapevine MSP\",\"description\":\"\",\"publisher\":{\"@id\":\"https:\/\/grapevinemsp.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/grapevinemsp.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/grapevinemsp.com\/#organization\",\"name\":\"Grapevine MSP\",\"url\":\"https:\/\/grapevinemsp.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg\",\"contentUrl\":\"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg\",\"width\":600,\"height\":159,\"caption\":\"Grapevine MSP\"},\"image\":{\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/person\/bd59bb9722808d3e8b3339137e9e3828\",\"name\":\"Cloudways\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/grapevinemsp.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/9c73104e6f4801624afa01bbc4c96758?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/9c73104e6f4801624afa01bbc4c96758?s=96&d=mm&r=g\",\"caption\":\"Cloudways\"}}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Security Threats from Cloud Service Providers","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/","og_locale":"en_US","og_type":"article","og_title":"Security Threats from Cloud Service Providers","og_description":"The cloud-related threats of 2013 are still around today. \u201cThe Notorious Nine; Cloud Computing Top Threats in 2013\u201d was published by the Cloud Security Alliance (CSA) and is updated regularly, according to the CSA website. This document is touted as a way to assist companies in making risk management decisions about their cloud strategies. As […]","og_url":"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/","og_site_name":"The Valley\u2019s Leading IT Company I Grapevine MSP","article_published_time":"2015-06-29T15:00:00+00:00","og_image":[{"width":300,"height":225,"url":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2015\/06\/security_threats_from_clo_69660_131368.jpg","type":"image\/jpeg"}],"author":"Cloudways","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Cloudways","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":["Article","BlogPosting"],"@id":"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/#article","isPartOf":{"@id":"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/"},"author":{"name":"Cloudways","@id":"https:\/\/grapevinemsp.com\/#\/schema\/person\/bd59bb9722808d3e8b3339137e9e3828"},"headline":"Security Threats from Cloud Service Providers","datePublished":"2015-06-29T15:00:00+00:00","dateModified":"2015-06-29T15:00:00+00:00","mainEntityOfPage":{"@id":"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/"},"wordCount":838,"publisher":{"@id":"https:\/\/grapevinemsp.com\/#organization"},"image":{"@id":"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/#primaryimage"},"thumbnailUrl":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2015\/06\/security_threats_from_clo_69660_131368.jpg","articleSection":["News"],"inLanguage":"en-US"},{"@type":"WebPage","@id":"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/","url":"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/","name":"Security Threats from Cloud Service Providers","isPartOf":{"@id":"https:\/\/grapevinemsp.com\/#website"},"primaryImageOfPage":{"@id":"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/#primaryimage"},"image":{"@id":"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/#primaryimage"},"thumbnailUrl":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2015\/06\/security_threats_from_clo_69660_131368.jpg","datePublished":"2015-06-29T15:00:00+00:00","dateModified":"2015-06-29T15:00:00+00:00","breadcrumb":{"@id":"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/#primaryimage","url":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2015\/06\/security_threats_from_clo_69660_131368.jpg","contentUrl":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2015\/06\/security_threats_from_clo_69660_131368.jpg","width":300,"height":225,"caption":"security threats from clo 69660 131368"},{"@type":"BreadcrumbList","@id":"https:\/\/grapevinemsp.com\/security-threats-from-cloud-service-providers\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/grapevinemsp.com\/"},{"@type":"ListItem","position":2,"name":"Security Threats from Cloud Service Providers"}]},{"@type":"WebSite","@id":"https:\/\/grapevinemsp.com\/#website","url":"https:\/\/grapevinemsp.com\/","name":"The Valley\u2019s Leading IT Company I Grapevine MSP","description":"","publisher":{"@id":"https:\/\/grapevinemsp.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/grapevinemsp.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/grapevinemsp.com\/#organization","name":"Grapevine MSP","url":"https:\/\/grapevinemsp.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/","url":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg","contentUrl":"https:\/\/grapevinemsp.com\/wp-content\/uploads\/2021\/09\/logo2850605_lg.jpg","width":600,"height":159,"caption":"Grapevine MSP"},"image":{"@id":"https:\/\/grapevinemsp.com\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/grapevinemsp.com\/#\/schema\/person\/bd59bb9722808d3e8b3339137e9e3828","name":"Cloudways","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/grapevinemsp.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/9c73104e6f4801624afa01bbc4c96758?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/9c73104e6f4801624afa01bbc4c96758?s=96&d=mm&r=g","caption":"Cloudways"}}]}},"_links":{"self":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts\/24049"}],"collection":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/users\/5"}],"replies":[{"embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/comments?post=24049"}],"version-history":[{"count":0,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/posts\/24049\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/media\/24050"}],"wp:attachment":[{"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/media?parent=24049"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/categories?post=24049"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/grapevinemsp.com\/wp-json\/wp\/v2\/tags?post=24049"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}