Subscribe free to our newsletters via your
. Space Industry and Business News .




TECH SPACE
IT security problems shift as data moves to 'cloud'
by Staff Writers
Washington (AFP) June 23, 2012


The Internet "cloud" has become the hottest topic in computing, but the trend has created a new range of security issues that need to be addressed.

The cloud is associated with things like personal emails and music which can be accessed on computers and a range of mobile devices.

But the US military and government agencies from the CIA to the Federal Aviation Administration also use cloud systems to allow data to be accessed anywhere in the world and save money -- and, ostensibly, to enhance security.

Microsoft, Google, Amazon and others are major players in the cloud, which seeks to transfer some of the data storage issues to more sophisticated data centers. Firms like Oracle, SAP and Salesforce.com offer cloud services for business.

Strategy Analytics forecasts US spending on cloud services to grow from $31 billion in 2011 to $82 billion by 2016.

But some experts say security implications of the cloud have not been fully analyzed, and that the cloud may open up new vulnerabilities and problems.

"If past is prologue I don't think any system is absolutely secure," said Stelios Sidiroglou-Douskos, a research scientist at the Massachusetts Institute of Technology's Computer Science and Artificial Intelligence Laboratory.

"The analogy most people give is having a lock on your door. It's not a guarantee no one will break in, but it's a question of how much time it will take, and if your lock is better than your neighbor's."

In a cloud environment, "this makes the job of the attacker so much harder, which means the amateur hacker might be obsolete," said Sidiroglou-Douskos, who is working on a US government-funded research project to develop "self-healing" clouds.

-- POTENTIAL GOLD MINE FOR CYBERCRIMINALS --

But if a system is breached, analysts say, the amount of information lost could be far greater than what is in a single computer or cluster.

"You can have better defenses" in the cloud, "but if an attack happens, it's highly amplified," says Sidiroglou-Douskos.

The four-year MIT project funded by the Defense Advanced Research Projects Agency seeks to develop systems that automatically fix data breaches in a manner similar to "human immunology," says the researcher.

A number of cloud security breaches have raised concerns, including attacks on the Sony PlayStation Network, LinkedIn and Google's Gmail service. One hacker recently claimed to have stolen credit card numbers from 79 major banks.

"Crimes target sources of value. Large company networks offer more targets to hackers," says Nir Kshetri, a professor of economics who studies cybercrime at the University of North Carolina at Greensboro.

"Information stored in clouds is a potential gold mine for cybercriminals."

Kshetri said in a paper submitted to the journal Telecommunications Policy that when questions come up, "the cloud industry's response has been: Clouds are more secure than whatever you're using now. But many users do not agree."

-- 'FAKE CLOUDS' --

Marcus Sachs, former director of the Sans Technology Institute's Internet Storm Center, said the cloud may be more secure but also opens up new questions.

"In the cloud, you don't necessarily know where your data sits," Sachs told AFP.

"That doesn't make it less vulnerable to attack, but there are questions when it comes to (an) audit, or if you want to take the data back or destroy it, how do you know you've erased it?"

Sachs said that analysts have also discovered "fake clouds" which are offered as low-cost alternatives but are in fact operated by "criminal groups which monitor and steal the data."

"We have seen instances of this not in the US, but in the former Soviet Union and in China," he said.

Still, the cloud market is burgeoning, with companies and government agencies moving to either "public" clouds that are easily accessed or so-called "private clouds" that are segregated from the Internet.

Some analysts say other issues need to be resolved about cloud computing, such as who is liable if data is lost, and how data can be accessed for government investigations.

Outages have recently affected Apple's and Amazon's cloud services, causing some websites to be affected.

"Privacy, security and ownership issues in the cloud fall into legally gray areas," Kshetri says.

Sidiroglou-Douskos said there is no single answer for people or companies choosing between cloud systems and holding the data themselves.

"If you are trying to protect yourself from the government, then having it in the public cloud makes it easier for them to get it," he said.

"If your main worry is a hacker in Russia, maybe (cloud) infrastructure is better for your own security."

.


Related Links
Space Technology News - Applications and Research






Comment on this article via your Facebook, Yahoo, AOL, Hotmail login.

Share this article via these popular social media networks
del.icio.usdel.icio.us DiggDigg RedditReddit GoogleGoogle








TECH SPACE
Science world commemorates father of computer science
Paris (AFP) June 20, 2012
Scientists will gather from Bangalore to Texas on Saturday to honour British mathematician Alan Turing, a pioneer of the modern computer whose code-cracking is credited with shortening World War II. On the June 23 centenary of his birth in London, several cities will host conferences and exhibitions to celebrate the work of a man hailed as a rare genius today but persecuted for being gay whe ... read more


TECH SPACE
IT security problems shift as data moves to 'cloud'

Samsung eyes 10 mn mark for Galaxy S3 by end of July

ISS to Build Up Meteorite Defenses

Smartphones put writing on the wall for paid texts

TECH SPACE
Lockheed Martin Selected to Manage Major Defense Information Systems Network Operations

Lockheed Martin Selected to Deliver Major Improvements to DoD's ISR Information Sharing Capabilities

Boeing FAB-T Demonstrates Communications with On-orbit AEHF Satellite

Lockheed Martin Completes Environmental Testing on Second US Navy Satellite

TECH SPACE
USAF officials announce milestone Atlas V launch

EVE Underflight Calibration Sounding Rocket Launch

ILS and AsiaSat Announce a New Contract for an ILS Proton Launch

A milestone in launcher preparations for Arianespace's fourth Ariane 5 flight of 2012

TECH SPACE
Trial by vacuum brings next Galileo satellites closer to launch

Boeing Completes Fifth GPS IIF Satellite for USAF

GPS being used as weather forecast tool

Apple fends off Android challenge with maps, Siri

TECH SPACE
Northrop Grumman F-35 Supplier Quickstep Opens New Facility

Boeing Delivers 100th Modified Chinook to US Army

US seeks to reassure Japan over Osprey aircraft

Kaman in New Zealand talks for helos

TECH SPACE
Renesas shareholders approve $630 mn in aid

Quantum bar magnets in a transparent salt

Researchers 'heal' plasma-damaged semiconductor with treatment of hydrogen radicals

Relocating LEDs from silicon to copper enhances efficiency

TECH SPACE
Earth observation for us and our planet

NASA Selects Low Cost, High Science Earth Venture Space System

Teledyne to Develop Space-Based Digital Imaging Capability

Satellites show less pollution from deforestation

TECH SPACE
Lead poisoning 'epidemic' plagues California condors

New way of monitoring environmental impact could help save rural communities in China

New Software Forecasts Noise Levels in a Street

Red Cross sounds alarm about weapon contamination




The content herein, unless otherwise known to be public domain, are Copyright 1995-2014 - Space Media Network. AFP, UPI and IANS news wire stories are copyright Agence France-Presse, United Press International and Indo-Asia News Service. ESA Portal Reports are copyright European Space Agency. All NASA sourced material is public domain. Additional copyrights may apply in whole or part to other bona fide parties. Advertising does not imply endorsement,agreement or approval of any opinions, statements or information provided by Space Media Network on any Web page published or hosted by Space Media Network. Privacy Statement