Study on cloud security threats
The Top Cloud Security Threats Report compiled by the Cloud Security Alliance (CSA), and commissioned by CSA member Hewlett-Packard (HP), is intended to alert businesses to current and future cloud computing risks. Based on a survey of corporate IT security experts across 29 companies, the report recommends strategies companies can use to protect their business transactions and data.
Among the identified potential threats are malicious programs such as the Zeus botnet and the InfoStealing trojan. However, the authors of the study not only present threats that are based on criminal intent, they also discuss the risks caused by the increasing number of data exchange interfaces on the web. Security holes in this area can have far-reaching consequences for cloud environments. Furthermore, the study lists threats such as malicious company insiders, shared technology vulnerabilities, data loss and leakage, and account, service and traffic theft.
The study is intended as a companion to the CSA's 76 page "Security Guidance for Critical Areas of Focus" guide, which contains best practice information for businesses. HP offers an integrated portfolio consisting of products as well as consulting, training and managed services designed to reduce cloud complexity and mitigate risks.The fourteen page cloud computing report is available to download.