Question

Some authors make the assertion that there are no new security issues with cloud computing at a network-, host-, or application-level. They maintain that cloud computing may exacerbate existing issues, but that cloud computing does not present new security issues. Do you agree with that assertion? Explain security issues with cloud computing. Include how they differ from privacy issues. How are organizations and CSPs overcoming those issue? Use examples and references to support your answer. Provide at least one reference outside of the assigned reading.

Answer 1

Cloud computing is making easier for organisations and CSPs to store and backup their data whenever they want. Using cloud computing a person working remotely can easily access data whenever he wants. Although this makes our work easier there are also some security issues with cloud computing:

1) Certain employees should be allowed to access only certain part of the cloud service. If an employee can access all the part of the cloud service then he/she can breach such data to a cybercriminal and can cause harm to the organisation.

2) Denial of service (Ddos) attack occurs when a system server is flooded with request. Cloud services can also be flooded with requests taking the system down. While the system is down the cybercriminals can hack into the system.

3) An employee can be spoofed in order to gain access to the cloud services data. This process is called phishing. Phishing is done through mail or messages where the employee is sent malicious mail which asks the user information. If spoofed the cybercriminal can manipulate the data in the cloud service.

Security measures that organisation can take in order to provide cloud security are:

The first security breach for an organisation are the employees who are working remotely. Since they do not use company's laptop and are even share information via famous video conference applications like Zoom can cause a threat to the data of the organisation. In order to protect this a company can follow such process:

i) Provide better security to the person. Apply firewalls and if possible supply the organisations device such that the acitvities can be monitored.

2) Restrict access to certain informations. For example there should be certain folders or Directories where only authenticated person can gain access.

3) Restrict downloading sensitive information to the personal device that a person is using. This makes the data protected from any threats

4) Do not allow employees to gain access to cloud service from a device which seems vulnerable to threats. As a little breach can cause attacks like ransomware where the data will be locked and a certain amount of money will be demanded to unlock the data.

If you liked the solution then give a thumbs up?