Tips

Tips

• Cloud computing insider threats: Exploring risk scenarios, mitigations

  Do cloud computing insider threats seem unlikely? Think again. Paul Kirvan offers scenarios and key questions for providers to reduce the risk.  Continue Reading

• Can self-managed cloud security controls ease enterprise concerns?

  Expert Dave Shackleford details how enterprises can increasingly manage their own cloud security controls with private virtual cloud offerings.  Continue Reading

• How to use PCI SSC supplement to achieve PCI compliance in the cloud

  Ed Moyle examines highlights of the recently released PCI SSC information supplement that offers new details on achieving PCI compliance in the cloud.  Continue Reading

• Cloud API security risks: How to assess cloud service provider APIs

  The CSA says cloud API security is a top threat to cloud environments. Expert Dave Shackleford explains how to assess the security of providers' APIs.  Continue Reading

• How to implement a standards-based cloud risk assessment strategy

  Learn how to how to choose, develop and begin implementing a standards-based framework for enterprise cloud computing risk assessments.  Continue Reading

• The other cloud atlas: Building a cloud service provider inventory

  Struggling with rogue cloud usage? Ed Moyle explains how and why a cloud service provider inventory can help manage multiple cloud service providers.  Continue Reading

• How to develop cloud applications based on Web app security lessons

  Expert Dave Shackleford details how to build cloud applications based on typical Web app security flaws and cloud provider tools and platforms.  Continue Reading

• Cloud application inventory tracking best practices

  Brien Posey discusses the pros and cons of application inventory tracking in the cloud, and advises enterprises on what to track in the cloud and why.  Continue Reading

• SaaS, cloud computing vulnerability management: Choosing a provider

  Cloud-based vulnerability scanning is gaining market share. Learn how to decide if these services are a good fit for you and how to choose a provider.  Continue Reading

• Cross-VM side-channel attacks: How to defend cloud infrastructures

  Expert Dave Shackleford analyzes the likelihood and effects of cross-VM side channel attacks in the cloud and offers mitigations for concerned users.  Continue Reading

• How do international data privacy laws compare to the Patriot Act?

  What level of data privacy exists in the global cloud? Expert Francoise Gilbert compares international data privacy laws with the Patriot Act.  Continue Reading

• How cloud management consoles aid enterprise cloud security management

  Ajay Kumar explains what cloud management consoles are and how they can help enterprises keep cloud systems and data secure.  Continue Reading

• Monitoring cloud services requires business support, existing tools

  Existing security tools and business relationships are often the best methods for monitoring cloud services to spot rogue clouds in the enterprise.  Continue Reading

• How to overcome unique cloud-based patch management challenges

  Expert Dave Shackleford discusses how patch management differs in a cloud environment and provides tips for dealing with new patching obstacles.  Continue Reading

• NIST cloud security spec addresses cloud geolocation, data security

  The new NIST cloud security proof-of-concept implementation details how to manage workloads based on cloud geolocation data.  Continue Reading