What is Cloudbursting?

Posted by Bharath Chandrasekhar in Cloud, Cloud-based Security, cloudbursting, DataCenter, hybrid-cloud, private cloud, public cloud, Securing the Cloud, Security, Threats from the Cloud, Uncategorized, Virtualization Mar 15th, 2011 | 8 Comments Do you know what cloudbursting is? It is a concept where when you run out of your computing resources in your internal data center, you “burst” the additional workload to an external cloud on an on-demand basis. The internal computing resource is the “Private Cloud” and the external cloud is typically a “public cloud” for which the organization gets charged on a pay-per-use basis. When your deployment has the ability to do “cloudbursting” or spreading the load to the public cloud, you essentially have a Hybrid Cloud. Hybrid Clouds can deliver a bit...

Data Breach at Microsoft Highlights Security Problem in SaaS

Posted by Dave Asprey in Secure Data Centers, Securing the Cloud, Security, Threats, Uncategorized Dec 27th, 2010 | Comments Off PC World reports that company data belonging to customers of Microsoft’s hosted business suite BPOS has been accessed and downloaded by other users of the software. Oops. Breaches have happened to Google, Microsoft, and countless other SaaS providers. Here, it was a relatively small breach where a misconfiguration – presumably by a Microsoft employee – created a hole globally.  To its credit, Microsoft spotted the problem and fixed it within 2 hours, and the data was relatively innocuous. But the damage is done. At the recent Gartner Data Center Conference, a room full of CIOs...

Conflict of Interest Leads to Big Malware Attack

Posted by Dave Asprey in Cloud-based Security, Cyber crime, Malware, Security, Threats, Threats from the Cloud, Uncategorized Dec 14th, 2010 | 2 Comments (Ed. note: While the following does not strictly deal with “cloud security,” we thought it was of such a degree of importance to post it here.) Today’s disclosure by Google and Microsoft that they were tricked into serving malware highlights an inherent conflict of interest between advertising-based businesses and the security needs of their customers. Ad networks like Google and MSN get paid when they sell ads, so they naturally focus on being the best at selling ads. Because these ad networks don’t get paid to keep people’s computers secure, they spend just enough on security...

Are Private Clouds Doomed by IT Departments?

Posted by Dave Asprey in Cloud-based Security, Privacy, Compliance and Identity, Securing the Cloud, Uncategorized, Virtualization Dec 13th, 2010 | Comments Off I spent last week at Gartner’s Data Center Conference in Las Vegas and learned some very interesting things. Between the jam-packed conference tracks, the show floor, and the vendor-sponsored after-parties, there was just no time to count cards at the blackjack tables. That probably saved me a lot of money, since Caesar’s, which housed the conference, had $25 minimum bets. (ouch!) One of the more interesting sessions on cloud and security polled a large room of a few hundred IT execs about their concerns with internal clouds. They answered in this order: Culture and Politics Innovative...

UPDATE: Why Trend Micro’s Cloud Security Protection is relevant to the new Adobe Flash Player Security Vulnerability

Posted by Aaron Lewis in Cloud-based Security, Securing the Cloud, Threats from the Cloud, Uncategorized Sep 16th, 2010 | Comments Off Enterprises using Adobe in an Infrastructure as a Service (IaaS) cloud environment may find a new Adobe Flash Player vulnerability to be of interest. Trend Micro’s antivirus and Trend Micro Deep Security offerings can both protect for this latest vulnerability and counter exploits of the vulnerability. If you have a IaaS cloud server with a Deep Security agent using updated rules (specifically rule–1004403 (Adobe Flash Player Remote Code Execution), you are covered. The above is an update to what we posted yesterday (September 15, 2010) regarding this critical vulnerability in Adobe’s...

Is “trust us” good enough for private data in the public cloud?

Posted by Andy Dancer in Uncategorized Oct 6th, 2009 | Comments Off Every day brings more headlines about social networking, cloud computing and Software as a Service (SaaS).  Each of these fast growth areas shares an important element in common – they rely on a movement of data from private computers into the public cloud.  The theory goes that this data is protected by the service provider who is an expert in their field.  But in very few cases is that field data security, and there are important implications that should be considered. Security Researches call for Google and others to use SSL to protect all of the interactions with their services.  I agree...

Cloud Security Summit Featuring Raimund Genes

Posted by admin in Uncategorized Sep 16th, 2009 | Comments Off BrightTalk is hosting a Cloud Security Summit on September 30.  At this summit, industry leaders will dive into the different security options available across multiple cloud architectures, and case studies and association presentations will further illustrate the security issues facing the cloud today.  Trend Micro’s CTO, Raimund Genes, will present “The Threat Cloud Landscape” discussing the threats arising in cloud computing and the various solutions available.  The summit is in webinar format and recordings of presentations will also be available for viewing after the...