RSA's Coviello: Cloud Computing Not Secure Enough
Cloud-based services are being rolled out without enough attention being paid to securing these services and the information they handle. That was the finding of a recent study commissioned by RSA Security.
IDGNS: What do you think is the greatest security weakness for cloud-computing services?
Coviello: It's almost too early to tell. How many instances do you see of cloud computing out there? I can give you a number of places where there could be insecurities. What people tend to worry about is the co-mingling of information, and that's probably the least of anybody's worries because it's very easy to partition data. What they ought to be more worried about is what are the access controls, what the authentication mechanisms are, how you ensure information doesn't somehow leak out to somebody outside.
I'd worry about those things, but these are things that are going to have to be investigated and developed as people start to get a feeling for what cloud computing is all about.
EMC
Receive the latest security news as it breaks.
