Security in the cloud

I've always had this question in the back of my mind and always there:

"Who hold the account root on the cloud? AND where the equipment? "

For a customer who is owner of its hardware and software on its site are the unique root/admin, and that he wants to add, but the cloud changes this understanding. Unless that cloud providers to offer a block of material to the customer who was in turn to (former data centers). So, how can we overcome them?

DJ

Hello

Hello, I assume that firms are in the cloud, because in my experience a lawyer would ask which access to information and it's always a problem.

Not really, I know that some of those who use the cloud, the key is to understand how to properly use the cloud. For example, some lawyers use Forefront and Microsoft Exchange in the cloud. When using such a service, digital signature of e-mail makes sense but also ensure that critical data do not leave the scene, so a solution like Zscaler DLP can be justified.

Re: jurisdiction

You're right, it's a big problem if you are using a cloud that spans the country, but to the United States, not much cover countries and it is almost impossible for your data to be included in another country, this is why you must correctly interagate your Cloud provider to determine the limits of its jurisdiction. The European Union on the other hand can have problems with this.  A recent example is democratic party Canadian, that they wanted to use Salesforce (based in the United States), they have determined if they encryption data before placing it in Salesforce, it meets all of the conditions and that the United States could not decipher at will.  So in this case data on site encryption and placing it in the cloud are a way to work around this possible issue.

Re: In memory has the keys

It's true, no way around it if you do the encryption in the cloud, I suggest encryption before you leave your premises and then place it in the cloud. Very powerful in this way. Just to make sure that its usable.

Remember it is not really on the virtual machine or the cloud itself, but security in the cloud is on the data, yes the cloud, you choose the secondary controls needs such as IDS/IPS, but ultimately it is your data that counts. Therefore, encrypt and sign necessary to confirm the integrity and confidentiality and use well known, encryption mechanisms, like something blessed by your Government which believe me did exhaustive tests and tackles cryptanalytic against it.

Finally, do your research and due diligence, keep updated with the cloud and data attacks, so that you are prepared for the worst. This kind of intelligence is essential to the continued safety, do not depend on the tool providers to do it for you as you risk your data as such in the end data security is your responsibility.

Re: Supplier responsibility

In every cloud provider document I've read in the United States, you assume all risks, not them. There is no sharing of the risks here. It's your data, your responsibility. In the EU, it is a little different because of different laws.

Encryption and digital signatures are not the end of privacy and integrity but if properly will protect your data. If you stay ontop of the intelligence about the attacks, then you will know also better ways to protect your data.

Not all solutions of cloud IaaS and maybe if put you up an IaaS, you should consider how data moves, is operated, and know if you can use something like CipherCloud to encrypt/decrypt the data as it leaves your premises for use within your cloud IaaS...

Best regards

Edward L. Haletky

Host communities, VMware vExpert,

Author: VMware vSphere and Virtual Infrastructure Security,VMware ESX and ESXi in the 2nd business edition

Podcast: the Podcast for security virtualization of resources: the virtual virtualization library

Tags: VMware

Similar Questions

  • How to save downloaded and open the PDF directly into my laptop, compared to saving the file in the cloud? Can I remove DC and install Acrobat Reader, which is thin and easier to use for my needs and much, much more secure?

    Somehow, I downloaded and installed Adobe alleged DC update for the existing acrobat Reader installed on my laptop.

    DC app has been a disaster for me in terms of generation of convoluted navigation and extra work.

    In addition, I do NOT trust or want an application based on a cloud because of the deep and hard-learned risk, privacy and security, as well as the occasional loss of connectivity online and access, what urgent needs can get GROUND in terms of use of such an external cloud-based application.

    Issues related to the:

    [1] how to save a PDF downloaded and open directly on my laptop, a report file to save the file in the cloud and then copying it in the folder of the laptop? This process in several steps inside the DC is a frustrating PITA, as Adobe Acrobat Reader has been sufficient for my needs.

    can [2] Alternatively, I remove CD and install the latest version of Adobe Acrobat Reader, which is thin and easier to use for my needs and much, much more secure?

    Thank you very much in advance for the help and deliberate in a timely & the readers attention. Today is Tuesday, November 3, 2015.

    Kind regards

    Stephen H. Franke

    E-mail: shfranke@hotmail... com

    Hi stephenf95557665,

    (1) you can simply save the file on your computer as allows you to save in the older version of the player, it is not necessary to register I your cloud of document.

    If you save the file to the document cloud, you will be able to access any system from anywhere.

    (2) If you still think earlier version users need, then they can probably uninstall the last being & reinstall the old version using this link http://get.adobe.com/reader/enterprise/

    Kind regards
    Nicos

  • What are the vulnerabilities of security for Adobe Cloud?

    What are the vulnerabilities of security for Adobe Cloud?


    Thomas 85719935

    Please visit: CC help | Creative cloud / Common Questions

  • ePrinters 'in the cloud' Setup

    I have three HP Pavilion 14 Chromebook computers as well as three HP Envy 4500 ePrinters I will be implemented very soon to the family members.  (I'm new to cloud computing).  I searched online and in this forum, but I can't find any explanation as to exactly how the printers to connect to the internet.  Instructions indicate simply, follow the instructions in configuration of web compatible printing on the printer control panel, but I would like to know in advance.  Anyone who is familiar with the Chromebooks knows that you can not install the software on those machines.  Yet the printer installation instructions, do refers to the installation of the software on Windows computers but do not mention the procedure of setting up printers for Chromebooks.  I noticed there is only a USB port at the back of the printer so I guess that a direct connection of the printer Ethernet cable for the modem cannot be used.  So is the only option for wireless connection to the gateway of the wireless modem-router?  This can be Basic for most, if not all, so forgive my "newbie" question  Other than to protect the ePrint e-mail address, is any additonal security needed "printing via the cloud?"  Thank you!

    Hi eKeith!

    Welcome to the Forums of HP's Support.  I understand that you have 3 new Chromebook and 3 printers Envy 4500 and want to get their installation and operation. And don't worry to ask questions of 'beginner', everyone on the forums once started as a beginner.

    Let's start by mounting the printer on your wireless home network.  This can be done from the front panel of the printer.  I have included a link to your user, page 53 guide in the section titled "to connect the printer", you will find detailed instructions.  Please take note of the IP address of the printer once it is on your network (if possible, please print the network report once you put the printer on the network).  Later, we will need the ip address for your questions of scanning on your other post.

    Now that the printer on your wireless network, we need to enable web services for each printer.  There is a section in your user guide starting on page that reviews the HP ePrint.  In the section "to print using HP ePrint' please follow the instructions for step 1 enable web services.

    Once web services are enabled, you will want to create custom email ePrint for each printer (it is not possible to have email ePrint for all 3 printers). I have included a document with detailed instructions.

    Now that we have customized email ePrint, we need to set up Google Cloud Print for each printer. I have included a document with instructions to configure Google Cloud Print.  We should now print. For any additional consultation, I have included the link to the web page of Google Cloud Print.

    HP Envy 4500 e-All-in-One Series user guide

    http://h10032.www1.HP.com/CTG/manual/c03784120.PDF

    Setting upward a Custom Email address for ePrint

    http://support.HP.com/us-en/document/c02940150

    With the help of Google Cloud Print with your HP printer

    http://support.HP.com/us-en/document/c02817255

    Google Cloud Print

    http://www.Google.com/Cloudprint/learn/

  • Sync Z30 can Z30 blackBerry to the cloud

    Can Z30 sync in the cloud (as installed applications, database applications, SMS, etc.)? What I think is that instead of plugging the z30 regularly and made backups using the desktop app, have Z30 backup/synchronization automatically to the cloud (count Blackberry, Dropbox, etc..)

    It has BlackBerry Protect

    http://us.BlackBerry.com/devices/features/security/protect.html

  • I want to host a literature review using the Document Adobe cloud, the cloud service that Adobe offer with the ITAR requirements?

    Some key aspects of the ITAR , making cloud adoption a challenge include:

    • Information and documents related to the USML items can only be shared by "us"people "(unless authorized by the U.S. Department of State).
    • All U.S. suppliers in the USML supply chain must save gets licenses for import/export of the U.S. Department of State.
    • Re-unauthorized transfer or re-export of any article is a major violation of the law - and is tightly controlled.
    • Scope of the regulation includes data that is accessible by individuals empowered us when traveling outside the United States and is then shared with foreign nationals.

    Depending on the scope and definitions in ITAR, data assets and information are considered as exports. That being said, it is generally accepted that ITAR-controlled documents saved in the cloud must be in accordance with the policies and rules of the ITAR. While most of the companies that need to comply with ITAR rules have detailed compliance programs in place on a strict control of documents, security of information, materials and equipment on site (i.e., in their own facilities and data centers), it's a big challenge to maintain the same strict guidelines when the decision is taken to move to cloud infrastructure for critical business needs.

    And regarding the protection of data, authorities said that encryption is not enough-ITAR if applies even to the data encrypted in the cloud if servers are located outside the United States the IOC newspaper recently quoted a State Department official, "there are currently no exemption of license for the use of encryption to store data in the cloud."

    Hi Matthew,

    Please check the details here: http://www.adobe.com/content/dam/Adobe/en/security/pdfs/adobe-ccf-012015.pdf

    Thank you

    Abhishek

  • EchoSign documents are stored in the cloud?

    Hello

    Does anyone know if the EchoSign documents are stored in the cloud to Adobe anywhere?

    Thank you

    Hello

    EchoSign documents are stored in the Adobe servers located in different geographical locations.

    Please follow the below mentioned link for more information on Adobe Document Cloud security: -.

    https://www.echosign.Adobe.com/content/dam/EchoSign/docs/PDFs/document-cloud-security-over view - ue.pdf

    Please let me know if it helps.

    Kind regards

    Mohamed

  • I can't drag and drop files into the "cloud".

    When I click the icon "Download files", I can do but I need to download one at a time (I can't select multiple files using shift or control).  There are THOUSANDS of files, I want to spend.  I watched the video tutorial and I see the very simple way, he explains to drag and drop a folder on my computer to the 'cloud' which I think is a fancy way of saying that it is hard to Adobe and not mine.

    If I'm trying to drag and drop a PDF file, it only that opens the file in internet explorer, in the same window, on the same tab, then I click on the return button and I must return to my files, but the new file is not there.

    I just purchased the subscription, I was using this within half an hour, and I'm already frustrated of not being able to do the simplest tasks.  Help, please!  SID.  928 718-7777 Y there a number of technical support, or you can call me?

    Internet Explorer does not support "drag and drop" or the download of multiple files. These limitations are functions of security by Microsoft.

    Please try using Firefox or Chrome browsers.

  • Apple Watch activity is not in the cloud?

    So, I've been using a Apple Watch for a while and my number one problem is that 'Activity', I put together for the last year is not sync with the iCloud, so when I upgraded my iPhone 6 to iOS10 all my activity watch is gone. I tested this point last week and it seems that "Activity" app does not synchronize your data in the cloud, so if you lose your phone or your watch you will have to start all over again and latest data are lost. This seems to be a huge concern when I spend all this time my overall follow-up and progress. Everyone see what happens if you put to level or restart/reset your watch or your phone?

    Hello

    Health and historical activity data is stored on your iPhone. It is not recorded separately in iCloud.

    To guard against data loss, be sure to make regular backups of your iPhone.

    If the backup via iTunes, make sure to select the option to encrypt iPhone backup (unencrypted backup excludes the sensitive data, including health and activity). iCloud backups are encrypted as standard.

    More information:

    The backup of your iPhone, iPad and iPod touch - Apple Support

  • I just new iPhone 7 & when I transfer, none of my music is available offline (purchased and apple's music program), trying to figure out how I can download it all at once, without having to enter each individual album and click the cloud

    Just got the new iPhone 7 & when I transfer iphone 6 iPhone 7, my music has arisen on the phone, but none of my music is available offline, try to understand how I can download all at once for use offline, without having to enter each individual album and click the cloud.  I have a lot of music on my phone, would take me forever to individually download each album one by one for offline use.

    I have both bought albums/songs itunes and also many of the monthly music apple package.  In any case for all it all at once?

    Hello

    You must use the same identifier apple

    Go down homepage itunes page where it says more about this music bought to display

    And download

    For music apple if its does not sign of apple ID then sign.

    See you soon

    Brian

  • Update for Sierra and now my Apple music does not appear I have a subscription and I am unable to get my music on the cloud?

    Update for Sierra and now my Apple music does not appear I have a subscription and I am unable to get my music on the cloud?

    Hey there Scotchman2926,

    I understand that you are experiencing some problems with Apple music on Sierra. I have a few suggestions to help you solve this problem. First of all, if you are unable to access the iTunes Store as well as music from Apple, use the information in this article to help resolve this problem:

    If you cannot connect to the iTunes Store - Apple Support

    If this does not resolve the problem, you might try signing out of your Apple ID in iTunes and then connect again.

    Thanks to be come to the communities of Apple Support and let us know how it goes.

    See you soon.

  • Can I recover my phone numbers of my Iphone 4 from the Cloud

    Can I recover my phone numbers of my Iphone 4 from the Cloud?

    Do you mean your contacts?

    Go to icloud.com and see if your contacts are there.  If so, you can recover.

  • Notes - moving notes version 3.3 to 4.2 or the cloud

    Hey all,.

    I am currently moving all my data from my old MacBook Air to my new year Pro, and it's all gone very smooth and has been a success. With one exception, my notes.

    I have hundreds of notes in the application notes on my MacBook Air. The notes are all "on my Mac", not in the cloud, so I thought I just move to the cloud and get like that on my new MacBook.

    My new MacBook is connected to the cloud and happily sharing notes with my iPhone and the iPad, everything works perfectly.

    But when I tried now activate the notes in iCloud on my old MacBook Air, the problem starts. It does not show the structure for the notes to iCloud and on my Mac, but it's not download/synchronize notes with the cloud. When I add a note to the iCloud on the MacBook Air, it does not appear on another device. When I add a note on my new MacBook, iPhone, or iPad appears on two other devices. Looks like there are has two parallel clouds, which uses the old MacBook Air and the other utilizing the new MacBook and my mobile devices, even if they are all connected to the same account.

    I guess this might have something to do with the different versions, as the old MacBook uses notes 3.3, while the other uses 4.2. Is 3.3 may not work with the cloud? I have not found a way both to update the application notes to a later version.

    With the help of Yosemite 10.10.5

    Any ideas / suggestions?

    Is it maybe possible to copy the notes manually on the new mac? Not by copy / paste it in the application notes, but using real files >

    Thank you!

    CuriousTim

    Is the old MacBook Pro connected to iCloud under settings?

  • Window Popup with strange characters when you want to play music from the cloud

    When I try to play music on the cloud (music downloaded on my computer), I get a popup with some strange characters. It was working fine 2 days ago. Nothing has changed on my computer. I tried uninstalling iTunes and reinstalling. Shows the problem. Any help would be appreciated.

    This is what looks like the pop-up window.

    PS - all anti-virus software are up and running.

    As an addendum, I tried to download music (by clicking on the cloud icon, which then shows an arrow pointing downwards). This popup has shown once again.

    Then I thought maybe it was having a problem with my account or my computer don't think she was allowed. So I checked my account login, and I was connected. Then I tried allowing my computer and this popup appeared again. I then tried my scroll wheel and it seems that it is a right screen. I guess that is the lower right button 'accept' but I'm not confident in the present.

    Strange things brewing.

  • which of my Photos is in the cloud?

    How will I know what photo on my iPad Air (running iOS 10) is stored on the cloud?

    It seems that if I double click on the photo, it will show this download of the Cloud.

    If you have settings > iCloud > Photos Options > iCloud photo library on all photos must be stored in iCloud. You can use a computer and log into the iCloud.com and switch to the pictures app to check that.

Maybe you are looking for