Welcome!

@CloudExpo Authors: Bob Gourley, Elizabeth White, Liz McMillan, Pat Romanski, Sematext Blog

Related Topics: Cloud Security, Java IoT, Linux Containers, @CloudExpo

Cloud Security: Article

Einstein, Sharks and Clouds: IT Security in the Cloud

Security, while a very real and legitimate concern is relative

What can these things possibly have in common?  In a word - relativity. 

I'm reminded of the old joke, two guys are swimming in the ocean when they notice a shark and one guy takes off swimming towards the boat, while the other says, "What are you doing?  We can't swim faster than a shark", the other replies, "I don't need to swim faster than a shark, just faster than you."

Lately there has been a barrage of articles with regards to cloud security, and some very public demonstrations of outages with Facebook and Twitter.  Its been a field day for many who oppose the cloud computing model.  Let me get this out of the way so that there is no misunderstanding, yes, I agree with most on the need for better security in the cloud, and rest assured, the cloud service providers are motivated to work on it.  That being said, lets move on. 

Security, while a very real and legitimate concern is relative.  While IT security has improved over the years I've been in this business, there are IT security breaches at banks, governments, educational institutions, retailers, and many other organizations which are not using the cloud today.  Just do a simple Google search and you'll find plenty of ammo on the need for better security, cloud or no cloud.

While the discussion of cloud security is certainly a very important one, lets not forget that it's a discussion that's relative to the level of security in the current business environment of those considering moving to the cloud today. 

Many of us who have spent our careers in or around IT recognize many of the security issues that cloud service providers will need to address.  This is particularly true for those that have spent most of that time at large, enterprise organizations.  We have to stop and remind ourselves, who are the prime, early adopter candidates for cloud computing? The answer here seems to be SMB

So lets talk about SMB IT practices for a moment, and lets begin with the smallest of organizations, say 1-20 employees.  Most of these companies can't afford IT staff, have no backup for their business records, have underutilized servers, have no security plan, or what many other IT professionals recognize as best practices in the industry, never mind security.  Disaster, backup and recovery?  Oh, yes, it's that tape backup in the desk next to the computer.  They fax and e.mail "secure" documents around sometimes to the wrong fax or (external) e.mail address - oops, there goes Joe's private medical records.  In these cases, cloud computing begins to look pretty attractive.

We can repeat this story on a gradual scale adding  IT headcount along the way.  How many IT people in a 20-50 employee organization?  50-100, 100-500?  Certainly, some of the aforementioned issues get addressed, though not all, as they're dealing with many IT issues, are probably understaffed, and overwhelmed.  Lets not forget we're talking about small businesses across all industries - accountants, doctors, lawyers, architects, retailers, and others, not necessarily small IT businesses.  Add in the greatest recession since WWII, and well, you can see how the cloud value proposition begins to make sense to many in this segment of the market.  Those small organizations will likely benefit from a move to the cloud, and will be more competitive as a result. 

Last one with the legacy traditional IT environment, please turn off the lights, and try to stay ahead of the sharks.

-Tune The Future-

More Stories By Ray DePena

Ray DePena worked at IBM for over 12 years in various senior global roles in managed hosting sales, services sales, global marketing programs (business innovation), marketing management, partner management, and global business development.
His background includes software development, computer networking, systems engineering, and IT project management. He holds an MBA in Information Systems, Marketing, and International Business from New York University’s Stern School of Business, and a BBA in Computer Systems from the City University of New York at Baruch College.

Named one of the World's 30 Most Influential Cloud Computing Bloggers in 2009, Top 50 Bloggers on Cloud Computing in 2010, and Top 100 Bloggers on Cloud Computing in 2011, he is the Founder and Editor of Amazon.com Journal,Competitive Business Innovation Journal,and Salesforce.com Journal.

He currently serves as an Industry Advisor for the Higher Education Sector on a National Science Foundation Initiative on Computational Thinking. Born and raised in New York City, Mr. DePena now lives in northern California. He can be followed on:

Twitter: @RayDePena   |   LinkedIn   |   Facebook   |   Google+

@CloudExpo Stories
"Once customers get a year into their IoT deployments, they start to realize that they may have been shortsighted in the ways they built out their deployment and the key thing I see a lot of people looking at is - how can I take equipment data, pull it back in an IoT solution and show it in a dashboard," stated Dave McCarthy, Director of Products at Bsquare Corporation, in this SYS-CON.tv interview at @ThingsExpo, held November 1-3, 2016, at the Santa Clara Convention Center in Santa Clara, CA.
In IT, we sometimes coin terms for things before we know exactly what they are and how they’ll be used. The resulting terms may capture a common set of aspirations and goals – as “cloud” did broadly for on-demand, self-service, and flexible computing. But such a term can also lump together diverse and even competing practices, technologies, and priorities to the point where important distinctions are glossed over and lost.
What happens when the different parts of a vehicle become smarter than the vehicle itself? As we move toward the era of smart everything, hundreds of entities in a vehicle that communicate with each other, the vehicle and external systems create a need for identity orchestration so that all entities work as a conglomerate. Much like an orchestra without a conductor, without the ability to secure, control, and connect the link between a vehicle’s head unit, devices, and systems and to manage the ...
All clouds are not equal. To succeed in a DevOps context, organizations should plan to develop/deploy apps across a choice of on-premise and public clouds simultaneously depending on the business needs. This is where the concept of the Lean Cloud comes in - resting on the idea that you often need to relocate your app modules over their life cycles for both innovation and operational efficiency in the cloud. In his session at @DevOpsSummit at19th Cloud Expo, Valentin (Val) Bercovici, CTO of Soli...
Complete Internet of Things (IoT) embedded device security is not just about the device but involves the entire product’s identity, data and control integrity, and services traversing the cloud. A device can no longer be looked at as an island; it is a part of a system. In fact, given the cross-domain interactions enabled by IoT it could be a part of many systems. Also, depending on where the device is deployed, for example, in the office building versus a factory floor or oil field, security ha...
Amazon has gradually rolled out parts of its IoT offerings in the last year, but these are just the tip of the iceberg. In addition to optimizing their back-end AWS offerings, Amazon is laying the ground work to be a major force in IoT – especially in the connected home and office. Amazon is extending its reach by building on its dominant Cloud IoT platform, its Dash Button strategy, recently announced Replenishment Services, the Echo/Alexa voice recognition control platform, the 6-7 strategic...
"Qosmos has launched L7Viewer, a network traffic analysis tool, so it analyzes all the traffic between the virtual machine and the data center and the virtual machine and the external world," stated Sebastien Synold, Product Line Manager at Qosmos, in this SYS-CON.tv interview at 19th Cloud Expo, held November 1-3, 2016, at the Santa Clara Convention Center in Santa Clara, CA.
Everyone knows that truly innovative companies learn as they go along, pushing boundaries in response to market changes and demands. What's more of a mystery is how to balance innovation on a fresh platform built from scratch with the legacy tech stack, product suite and customers that continue to serve as the business' foundation. In his General Session at 19th Cloud Expo, Michael Chambliss, Head of Engineering at ReadyTalk, discussed why and how ReadyTalk diverted from healthy revenue and mor...
Without a clear strategy for cost control and an architecture designed with cloud services in mind, costs and operational performance can quickly get out of control. To avoid multiple architectural redesigns requires extensive thought and planning. Boundary (now part of BMC) launched a new public-facing multi-tenant high resolution monitoring service on Amazon AWS two years ago, facing challenges and learning best practices in the early days of the new service. In his session at 19th Cloud Exp...
As data explodes in quantity, importance and from new sources, the need for managing and protecting data residing across physical, virtual, and cloud environments grow with it. Managing data includes protecting it, indexing and classifying it for true, long-term management, compliance and E-Discovery. Commvault can ensure this with a single pane of glass solution – whether in a private cloud, a Service Provider delivered public cloud or a hybrid cloud environment – across the heterogeneous enter...
You have great SaaS business app ideas. You want to turn your idea quickly into a functional and engaging proof of concept. You need to be able to modify it to meet customers' needs, and you need to deliver a complete and secure SaaS application. How could you achieve all the above and yet avoid unforeseen IT requirements that add unnecessary cost and complexity? You also want your app to be responsive in any device at any time. In his session at 19th Cloud Expo, Mark Allen, General Manager of...
Financial Technology has become a topic of intense interest throughout the cloud developer and enterprise IT communities. Accordingly, attendees at the upcoming 20th Cloud Expo at the Javits Center in New York, June 6-8, 2017, will find fresh new content in a new track called FinTech.
@DevOpsSummit taking place June 6-8, 2017 at Javits Center, New York City, is co-located with the 20th International Cloud Expo and will feature technical sessions from a rock star conference faculty and the leading industry players in the world. @DevOpsSummit at Cloud Expo New York Call for Papers is now open.
"We are a leader in the market space called network visibility solutions - it enables monitoring tools and Big Data analysis to access the data and be able to see the performance," explained Shay Morag, VP of Sales and Marketing at Niagara Networks, in this SYS-CON.tv interview at 19th Cloud Expo, held November 1-3, 2016, at the Santa Clara Convention Center in Santa Clara, CA.
The 20th International Cloud Expo has announced that its Call for Papers is open. Cloud Expo, to be held June 6-8, 2017, at the Javits Center in New York City, brings together Cloud Computing, Big Data, Internet of Things, DevOps, Containers, Microservices and WebRTC to one location. With cloud computing driving a higher percentage of enterprise IT budgets every year, it becomes increasingly important to plant your flag in this fast-expanding business opportunity. Submit your speaking proposal ...
Keeping pace with advancements in software delivery processes and tooling is taxing even for the most proficient organizations. Point tools, platforms, open source and the increasing adoption of private and public cloud services requires strong engineering rigor - all in the face of developer demands to use the tools of choice. As Agile has settled in as a mainstream practice, now DevOps has emerged as the next wave to improve software delivery speed and output. To make DevOps work, organization...
"We are a modern development application platform and we have a suite of products that allow you to application release automation, we do version control, and we do application life cycle management," explained Flint Brenton, CEO of CollabNet, in this SYS-CON.tv interview at DevOps at 19th Cloud Expo, held November 1-3, 2016, at the Santa Clara Convention Center in Santa Clara, CA.
Regulatory requirements exist to promote the controlled sharing of information, while protecting the privacy and/or security of the information. Regulations for each type of information have their own set of rules, policies, and guidelines. Cloud Service Providers (CSP) are faced with increasing demand for services at decreasing prices. Demonstrating and maintaining compliance with regulations is a nontrivial task and doing so against numerous sets of regulatory requirements can be daunting task...
Bert Loomis was a visionary. This general session will highlight how Bert Loomis and people like him inspire us to build great things with small inventions. In their general session at 19th Cloud Expo, Harold Hannon, Architect at IBM Bluemix, and Michael O'Neill, Strategic Business Development at Nvidia, discussed the accelerating pace of AI development and how IBM Cloud and NVIDIA are partnering to bring AI capabilities to "every day," on-demand. They also reviewed two "free infrastructure" pr...
"This is specifically designed to accommodate some of the needs for high availability and failover in a network managed system for the major Korean corporations," stated Thomas Masters, Managing Director at InfranicsUSA, in this SYS-CON.tv interview at 19th Cloud Expo, held November 1-3, 2016, at the Santa Clara Convention Center in Santa Clara, CA.