Online and Digital Identification, Securing Web 2.0, PKI and Digital Certificates

Cloud computing's primary obstacle: security

Tuesday, March 2, 2010

Corporation that see two-thirds of their IT budgets go toward maintaining the computing infrastructures could see that money going elsewhere with cloud computing, Arthur Coviello, executive vice president of EMC Corp., told attendees during a keynote at the RSA Conference.

But the primary obstacle for corporation moving to the cloud is security. “Because cloud computing represents a challenge we need to make sure we don’t end up in security hell,” he said.


A recent survey showed that 51% of corporations said that security was the main concern about cloud computing. Coviello issued a challenge to the industry to solve this problem. “Our industry needs to deliver security solutions that ensure levels of security that surpass what’s available today,” he said. “People need to trust the cloud.”

Creating a system that is secure and easy to use can enable business to save money and innovate. “We can be on the ground floor to create an infrastructure that is more secure and enabling than any of today’s infrastructures,” he said.

Coviello concluded, “If we can get security built into the virtual infrastructure from the get-go we can not only have visibility and manageability but risk decision points, and controls everywhere. In short, the cloud will turn the way we deliver security inside out. And information security will enable cloud computing to take full advantage of the Internet turning our current IT models inside out as well. This means we can deliver new waves of efficiency, agility and collaboration for organizations of all sizes.” [end] 

CloudPassage has launched Halo NetSec, a firewall, two-factor authentication product that enables access to virtual servers in the public cloud.

As reported by TechWorld, Halo NetSec covers security needs for services from infrastructure providers, such as Amazon Web Services or Rackspace. Administrators can set up defense parameters without having access to an actual network.

read more »

The Web Authorization Protocol (OAuth) has submitted OAuth 2.0, a framework for using security identity access tokens for native mobile application and API security, to the Internet Engineering Task Force’s (IETF) Internet Engineering Steering Group (IESG), reports ZDNet.

read more »

HP partnered with Anakam to offer a cloud-based system for identity vetting and credentials. Bryan Maybee, a solutions architect at HP, says the system can be used by the public or private sector for registering individuals to online services.

read more »

UnboundID, a provider of identity data solutions for cloud, telco, and enterprise computing, released products based on the Simple Cloud Identity Management (SCIM) standard. By supporting SCIM, UnboundID can provide a standardized and simpler solution for organizations provisioning and managing user identities across multiple cloud-based services, including IaaS, PaaS and SaaS offerings.

read more »

MTS Healthcare has partnered with Indigo Identityware to become an authorized reseller of Indigo’s health care identity products.

MTS specializes in providing clinical cloud computing services, and with this partnership, will be able to offer Indigo’s cloud products, clinical EHR integration and backup and disaster recovery.

read more »

Online identity protection provider Yubico and cloud server security provider CloudPassage have teamed up to provide authentication services for administrative network access in the cloud.

read more »