Cloud-based solutions are increasingly in business demand around the world. These solutions include everything from secure data storage to entire business processes. As we move more to cloud-oriented solutions, a new challenge comes into play: the 'security' of cloud storage. The question arises of where data is stored and more importantly, who has access to it. Here-lies cloud storage security - security measures that are implemented to protect data with the same (or often higher) level of sensitivity as would exist in an on-premise data storage solution.

Sounds great (yawn). Let's see what this actually means in real terms for your business data.

A recap on 'the cloud'

As we've covered before, cloud-based storage is an outsourced solution for storing data. Instead of saving data onto local hard drives, users store data on internet-connected servers. Datacentre's then provide a home for these servers to keep the data safe and secure to access. Businesses turn to cloud storage solutions to solve a variety of problems. Small businesses use the cloud to cut costs and big businesses use the cloud to distribute data more efficiently across the world. Any time you access files stored remotely, you are accessing a cloud - in simple terms anyway.

Email services are a prime example. Most email users don’t bother saving emails to their devices because those devices are connected to the internet most of the time.

Types of Cloud: Public, Private, Hybrid

• Public Cloud: These services offer accessibility and security. This security is best suited for unstructured data, like files in folders. Most users don’t get a great deal of customised attention from public cloud providers unless you use more business-oriented options. This is your Google Drives and your Dropboxes. This option is affordable.
  
• Private Cloud: Private cloud hosting services are on-premise solutions. Users assert unlimited control over the system. Private cloud storage is more expensive and more old-fashioned. This is because the owner manages and maintains the physical hardware.
• Hybrid Cloud: Many companies choose to keep high-volume files on the public cloud and sensitive data on a private cloud. This hybrid approach strikes a balance between affordability and customisation.

The big question: how secure is cloud storage?

All files stored on secure cloud servers benefit from an enhanced level of security. The security credential most users are familiar with is the password. Cloud storage security vendors secure data using other means often not implemented in on-premise solutions such as:

• Advanced Firewalls: Firewalls inspect traveling data packets (moving data). Simple ones only examine the source and destination. Advanced firewalls verify packet content integrity (what the data means). Clever algorithms then map the packet contents to known security threats and say yay or nay to data entering or exiting the cloud. A bit like a bouncer at your local club saying yes or no to guests based on previous experiences of having them trying to do snow angels on the dance-floor. You thought people would forget?     
  
• Intrusion Detection: Online secure storage can serve many users at the same time and successful cloud security systems rely on identifying when someone tries to break into the system, both at the door and when inside. Multiple levels of detection ensure cloud vendors can even stop intruders who break past the network’s initial defences. To continue our club analogy, these are your bouncers inside the club monitoring the guests.
  
• Event Logging: Event logs help security analysts understand threats. Analysts use this data to build a narrative concerning network events. This helps them predict and prevent security breaches based on known patterns of behavior. For example, bouncers predict incidents based on experience from other nights in the club.
• Internal Firewalls: Not all accounts should have complete access to data stored in the cloud. Limiting secure cloud access through internal firewalls boosts security. This ensures that even a compromised account cannot gain full access. Although you've been permitted access to the club, you don't get into VIP unless you are known and trusted.
  
• Encryption: Encryption keeps data safe from unauthorized users. If an attacker steals an encrypted file, access is denied without finding a secret key which will unlock the file and reveal the data contents. The data is worthless to anyone who does not have the key. Just the same as if you have no ID, you don't get into the club. Admittedly this analogy is running out of ground...
• Physical Security: Cloud data centers are highly secure. Certified data centers have 24-hour monitoring, biometric security and sometimes armed guards. These places are more secure than almost all on-site data centers.