Ostratto - Blog | Ostratto #servers

How secure is your data in the cloud?

Tue, 17 Dec 2019 16:23:44 +0000

Cloud-based solutions are increasingly in business demand around the world. These solutions include everything from secure data storage to e ntire business processes. As we move more to cloud-oriented solutions, a new challenge comes into play: the 'security' of cloud storage. The question arises of where data is stored and more importantly, who has access to it. Here-lies cloud storage security - security measures that are implemented to protect data with the same (or often higher) level of sensitivity as would exist in an on-premise data storage solution.

Sounds great (yawn). Let's see what this actually means in real terms for your business data.

A recap on 'the cloud'

As we've covered before, cloud-based storage is an outsourced solution for storing data. Instead of saving data onto local hard drives, users store data on internet-connected servers. Datacentre's then provide a home for these servers to keep the data safe and secure to access. Businesses turn to cloud storage solutions to solve a variety of problems. Small businesses use the cloud to cut costs and big businesses use the cloud to distribute data more efficiently across the world. Any time you access files stored remotely, you are accessing a cloud - in simple terms anyway.

Email services are a prime example. Most email users don’t bother saving emails to their devices because those devices are connected to the internet most of the time.

Types of Cloud: Public, Private, Hybrid

There are three types of cloud solutions, each offering a unique combination of advantages and drawbacks:

Public Cloud: These services offer accessibility and security. This security is best suited for unstructured data, like files in folders. Most users don’t get a great deal of customised attention from public cloud providers unless you use more business-oriented options. This is your Google Drives and your Dropboxes. This option is affordable.
Private Cloud: Private cloud hosting services are on-premise solutions. Users assert unlimited control over the system. Private cloud storage is more expensive and more old-fashioned. This is because the owner manages and maintains the physical hardware.
Hybrid Cloud: Many companies choose to keep high-volume files on the public cloud and sensitive data on a private cloud. This hybrid approach strikes a balance between affordability and customisation.

The big question: how secure is cloud storage?

All files stored on secure cloud servers benefit from an enhanced level of security. The security credential most users are familiar with is the password. Cloud storage security vendors secure data using other means often not implemented in on-premise solutions such as:

Advanced Firewalls: Firewalls inspect traveling data packets (moving data). Simple ones only examine the source and destination. Advanced firewalls verify packet content integrity (what the data means). Clever algorithms then map the packet contents to known security threats and say yay or nay to data entering or exiting the cloud. A bit like a bouncer at your local club saying yes or no to guests based on previous experiences of having them trying to do snow angels on the dance-floor. You thought people would forget?
Intrusion Detection: Online secure storage can serve many users at the same time and successful cloud security systems rely on identifying when someone tries to break into the system, both at the door and when inside. Multiple levels of detection ensure cloud vendors can even stop intruders who break past the network’s initial defences. To continue our club analogy, these are your bouncers inside the club monitoring the guests.
Event Logging: Event logs help security analysts understand threats. Analysts use this data to build a narrative concerning network events. This helps them predict and prevent security breaches based on known patterns of behavior. For example, bouncers predict incidents based on experience from other nights in the club.
Internal Firewalls: Not all accounts should have complete access to data stored in the cloud. Limiting secure cloud access through internal firewalls boosts security. This ensures that even a compromised account cannot gain full access. Although you've been permitted access to the club, you don't get into VIP unless you are known and trusted.
Encryption: Encryption keeps data safe from unauthorized users. If an attacker steals an encrypted file, access is denied without finding a secret key which will unlock the file and reveal the data contents. The data is worthless to anyone who does not have the key. Just the same as if you have no ID, you don't get into the club. Admittedly this analogy is running out of ground...
Physical Security: Cloud data centers are highly secure. Certified data centers have 24-hour monitoring, biometric security and sometimes armed guards. These places are more secure than almost all on-site data centers.

Remember

For a security system to be complete, users must adhere to a security awareness training program. Even the most advanced security system cannot compensate for negligent users.

Cloud Data Security Risks

Security breaches are rarely caused by poor cloud data protection. More often than not, improving user security will make cloud storage more secure. Many factors contribute to user security in the cloud storage system, most of which focus on employee training:

Authentication: Weak passwords are the most common enterprise security vulnerability and it's not uncommon for users to write their passwords down. Multi-factor authentication can solve this problem. (MFA for next Prime Minister!)
Awareness: In the modern office every job is a cyber-security job. Employees must know why security is so important and be trained in security awareness. Users must know how criminals may approach a cyber-attack - this leads us onto the next point.
Phishing Protection: Phishing scams remain the most common cyber attack vector. These attacks attempt to compromise user emails and passwords by 'fishing' their data. Ever seen that email 'your money has been locked, enter your details to unlock'? That's phishing. Using this data, attackers can move through business systems to obtain access to more sensitive files.
Breach Drills: Simulating data breaches can help employees identify and prevent phishing attacks. Users can also improve response times when real breaches occur. This establishes protocols for handling suspicious activity and also provides an apt time to give feedback to users on their security awareness.
Measurement: The results of data breach drills must inform future performance. Practice only makes perfect if analysts measure the results and find ways to improve upon them. Quantify the results of simulation drills and employee training to maximize the security of cloud storage.

Educate Your Employees

Employee education helps enterprises successfully protect cloud data. Employee users often do not know how cloud computing works. Explain cloud storage security to your employees by answering the most commonly asked questions:

Where Is the Cloud Located? Cloud storage data is located in remote data centers. These can be anywhere on the planet (sometimes even underwater). Cloud vendors often store the same data in multiple places. This is called redundancy.
How is Cloud Storage Different from Local Storage? Cloud vendors use the internet to transfer data from a secure data center to users. Cloud storage data is available everywhere.
How Much Data Can the Cloud Store? Storage in the cloud is exponentially large, almost unlimited to us. In a 2013 study it was predicted that over 1 Exabyte of cloud storage is in use - this is over 1,073,741,824 Gb's of data or if written, 50,000 trees made into paper and printed. Local drive space is limited. Bandwidth – the amount of data a network can transmit per second – is usually the limiting factor.A high-volume and low-bandwidth cloud service would run too slowly for meaningful work.
Does The Cloud Save Money? Most companies invest in cloud storage to save money compared to on-site storage. Improved connectivity cuts costs. Cloud services can also save business money in disaster recovery situations.
Is the Cloud Secure and Private? Professional cloud storage comes with state-of-the-art security. Users must follow the vendor’s security guidelines. Negligent use can compromise even the best protection.

Cloud Storage Security Best Practices

Cloud storage providers store files redundantly. This means copying files to different physical servers placed far away from one another. In a traditional office a disaster such as a fire would result in lost data and consequently lost business. In the modern office this data is stored in the cloud, copied to multiple data centers located throughout the region. A modern office would be able to recover overnight.

Redundancy makes cloud storage security platforms far less likely to occur. Cloud storage vendors measure hard drive failure and compensate for them through redundancy. Even without redundant files, only a small percentage of cloud vendor hard drives fail. These companies rely on storage for their entire income and so take every precaution to ensure users’ data remains safe.

This makes cloud storage an excellent option for securing data against cyber-crime. With a properly configured cloud solution in place, even ransomware poses very little threat. Simply wipe the infected computers and start fresh, all whilst data remains safe in the cloud.

In closing: It's time to invest in Cloud Storage Security
Businesses who invest in enterprise cloud storage need qualified cloud maintenance and management expertise. As a reputable managed security services provider, Ostratto can provide a full evaluation of your data storage and security needs today - just get in touch.

Otherwise, thanks for reading and chow for now.

Why should my business exist in the cloud?

Mon, 18 Nov 2019 11:08:54 +0000

'The cloud' - what is it, where is it and what can it do for your business.

Like the name suggests, the idea of the cloud feels lofty and hard to grasp. Simply put, cloud computing is the practice of using a network hosted on the Internet, or 'the cloud', to store, manage, and process data. This means you won’t have to maintain or own any hosting equipment locally as you pay someone else for this. Often the label of 'Cloud' is interchanged in different contexts but the basic premise is that instead of systems operating on your business premises, they are operating in a managed data centre for you.

With more than three quarters of companies making use of cloud computing, you’re probably no stranger to the idea. But have you considered moving your business IT to the cloud?

The Good

Cost

Cloud computing works on a pay-as-you-go basis. You only pay for what you use, similar to a utility bill. This eliminates the need to spend money on the expensive (and ever-changing) hardware that comes with hosting on a server. Instead of worrying about servers, you’ll be able to focus on your business.

Quick Accessibility

Many cloud computing services come on-demand, so increasing computing resources can happen efficiently. No more complaints from your users that the X drive is down, or that the business-critical services are running slow.

Scalability

This is a big one. With cloud computing, you have the ability to scale 'elastically'. In other words, your website or app receives the right amount of resources (bandwidth, storage, etc.) when it needs them. And when it's time to take on more employees as your business grows - there's no concerns whether your infrastructure can handle the additional users. Also - when your business decides it's time to move into a larger building - no more weeks of planning on how servers and equipment are going to be moved. It all moves with you without lifting a finger!

Optimal Performance

Most cloud computing services providers (definitely Google) run through secure local data centers that are maintained around the clock, to a much higher standard that is generally possible when IT is done in-house.

Easily Shared

The easy accessibility that comes with the cloud computing makes it very simple to share information across the globe. Data replication technologies are used to ensure that a user is always retrieving the closest copy of any data, from anywhere in the world.

This all happens automatically, with no need to configure peer optimisation of any sort.

Reliability

In cloud computing, data backups occur routinely making disaster recovery easy and inexpensive. With the before-mentioned data replication technology, data can be found on multiple devices at redundant sites on a cloud provider’s network.

Often providers guarantee 99.9% uptime - a number often not achievable in conventional business IT.

The not so good

Security & Privacy

Although cloud service providers often implement high security standards and industry certifications, storing data and important files on external service providers can introduce risks. Any discussion involving data must address security and privacy, especially when it comes to managing sensitive data. We must not forget what happened at Code Space and the hacking of their AWS EC2 console, which led to data deletion and the eventual shutdown of the company. Their dependence on remote cloud-based infrastructure meant taking on the risks of outsourcing everything.

Of course, any cloud service provider is expected to manage and safeguard the underlying hardware infrastructure of a deployment. However, your responsibilities lie in the realm of user access management, and it’s up to you to carefully weigh all the risk scenarios.

Though recent breaches of credit card data and user login credentials are still fresh in the minds of the public, steps have been taken to ensure the safety of data. One such example is the General Data Protection Rule (GDPR), which was enacted in the European Union to provide users more control over their data. Nonetheless, you still need to be aware of your responsibilities and follow best practices.

Vulnerability to attack

In cloud computing, every component is online, which exposes potential vulnerabilities. Even the best teams suffer severe attacks and security breaches from time to time. Since cloud computing is built as a public service, it’s easy to run before you learn to walk. After all, no one at a cloud vendor checks your administration skills before granting you an account: all it takes to get started is generally a valid credit card. This is why training on your business system users is vital.

Limited control and flexibility

Since the cloud infrastructure is entirely owned, managed, and monitored by the service provider, control is inherently removed from the customer.

To varying degrees (depending on the particular service), cloud users may find they have less control over the function and execution of services within a cloud-hosted infrastructure. A cloud provider’s end-user license agreement (EULA) and management policies might impose limits on what customers can do with their deployments.

Customers retain control of their applications, data, and services but may not have the same level of control over their back-end infrastructure, at least, often not to the same level of control provided with an on-premise system.

Vendor lock-in

Vendor lock-in is another perceived disadvantage of cloud computing. Easy switching between cloud services is a service that hasn’t yet completely evolved, and organizations may find it difficult to migrate their services from one vendor to another. Differences between vendor platforms may create difficulties in migrating from one cloud platform to another, which could equate to additional costs and configuration complexities. Gaps or compromises made during migration could also expose your data to additional security and privacy vulnerabilities.

Luckily this is becoming less of an issue as more migration tools are provided by providers such as Google's extensive migration suite.

Where is the cloud?

Cloud storage generally relies on hundreds of data servers across multiple locations around the world. This provides redundancy (should an entire data center fall over) and also optimal performance (always able to provide data from a close location). This means that your emails and business files are stored several times-over, across the globe in super secure data centers, waiting to be opened or written to.

Generally the Google data center in Ireland is most commonly used by our Ostratto partners as this is the closest full data center.

In closing

Cloud services are now fully available in today's business environment and the options of providers are vast. Ostratto are a firm believer of cloud technologies - they enable our partners (especially the smaller businesses) to scale freely and at a low cost which is vital during the early life of a business.

If you are interested in speaking to someone about how cloud technology can empower your business, get in touch with us today.