Overcoming the security challenges in Public cloud
Suchit Kumar M
Dec 10, 2021 4:16:20 PM
In the next six years, the data-lake sector is predicted to grow to $31.5 billion, prompting worry among large corporations. Why? As a result, there will be more public cloud usage, alerts, warnings, and security problems.
Over 56% of enterprise organisations handle over 1,000 security warnings per day, according to a 2020 Dark Reading article using recent research. Some major communities experience a million events per second on a regular basis. Every second or tens of PETA events every year, of course.
Due to an ever-increasing number of such incidents, many IT professionals are left asking if there is a better approach to handle them in today's digitally altered world.
Why isn't there a standard strategy to public cloud security?
As a result of lack of unified framework, there is no single approach to dealing with public cloud security. Security infrastructure, including SIEMs, SOAR, and data lakes, must be paid for by end users and cloud consumers – if they can discover them.
Data and security concerns will not disappear from the public cloud. However, CEOs shouldn't have to constantly dealing with these difficulties. Dropping off elementary school pupils or borrowing a company automobile are examples of regular operational practises in our modern world. If public cloud security is so important, why isn't there a standard approach to deal with it?
FedEx, Raytheon, Fidelity, Cigna, Goldman Sachs, and other security leaders designed the Cloud Security Notification Framework. In order to help cloud users better manage their data, the goal is to standardise how cloud providers report security events, notifications, and alarms.
In this post, we'll take a closer look at the public cloud's security weaknesses and how CSNF intends to address them.
The problem at hand.
Public cloud security alerts are rising as a result of a number of factors, including:
A number of high-ranking officials have stated that speed is more important than safety. Maintaining order was facilitated by overriding governance. Each person has a piece of the company's network edge in their own home network. The lack of fundamental governance controls and employee training on phishing and other threats left the door wide open for attackers to enter the company.
An increase of 400 percent from pre-pandemic levels is expected in the FBI's cyber department in 2021.
Cybercriminals, on the other hand, are getting better and better. More than two-thirds of IT executives surveyed by have expressed concern about the constant evolution of security threats. Forget phishing emails, IoT devices, and other techniques of gaining access to an organization's network, "cybercriminals" are better at what they do. IT teams are always evolving and determining what is and isn't a concern.
The number of occurrences will soar if there is no regular structure.
In action: CSNF in the making
Cloud service providers and IT users will both profit from CSNF. Asset inventories, vulnerability assessments, intrusion detection systems, and historical security alerts are all being integrated. It is wasteful and expensive to have these deadlines set.
For SecOps and DevSecOps teams, this means more time for more strategic tasks like security posture assessment, designing new products and upgrading existing systems..
With a consistent approach, you'll benefit from the following:
Next?
CSNF is in the process of building. There are cloud users who have gathered requirements and are providing input as a prototype is being constructed A multi-cloud security reporting translation tool, Decorator, is now being developed by the cloud providers.
Our world was forever altered by the pandemic, which included new public cloud security issues. Security, resource consumption, and cloud utilisation all benefit from a safer IT environment. Cloud vendors seek to keep the industry ahead of security challenges in an era of rapid digital transformation."
Over 56% of enterprise organisations handle over 1,000 security warnings per day, according to a 2020 Dark Reading article using recent research. Some major communities experience a million events per second on a regular basis. Every second or tens of PETA events every year, of course.
Due to an ever-increasing number of such incidents, many IT professionals are left asking if there is a better approach to handle them in today's digitally altered world.
Why isn't there a standard strategy to public cloud security?
As a result of lack of unified framework, there is no single approach to dealing with public cloud security. Security infrastructure, including SIEMs, SOAR, and data lakes, must be paid for by end users and cloud consumers – if they can discover them.
Data and security concerns will not disappear from the public cloud. However, CEOs shouldn't have to constantly dealing with these difficulties. Dropping off elementary school pupils or borrowing a company automobile are examples of regular operational practises in our modern world. If public cloud security is so important, why isn't there a standard approach to deal with it?
FedEx, Raytheon, Fidelity, Cigna, Goldman Sachs, and other security leaders designed the Cloud Security Notification Framework. In order to help cloud users better manage their data, the goal is to standardise how cloud providers report security events, notifications, and alarms.
In this post, we'll take a closer look at the public cloud's security weaknesses and how CSNF intends to address them.
The problem at hand.
Public cloud security alerts are rising as a result of a number of factors, including:
- In the digital age transformation, Covid-19 is a catalyst.
- When working from home, you have a network edge expanded.
- An increase in the unique dangers to security.
A number of high-ranking officials have stated that speed is more important than safety. Maintaining order was facilitated by overriding governance. Each person has a piece of the company's network edge in their own home network. The lack of fundamental governance controls and employee training on phishing and other threats left the door wide open for attackers to enter the company.
An increase of 400 percent from pre-pandemic levels is expected in the FBI's cyber department in 2021.
Cybercriminals, on the other hand, are getting better and better. More than two-thirds of IT executives surveyed by have expressed concern about the constant evolution of security threats. Forget phishing emails, IoT devices, and other techniques of gaining access to an organization's network, "cybercriminals" are better at what they do. IT teams are always evolving and determining what is and isn't a concern.
The number of occurrences will soar if there is no regular structure.
In action: CSNF in the making
Cloud service providers and IT users will both profit from CSNF. Asset inventories, vulnerability assessments, intrusion detection systems, and historical security alerts are all being integrated. It is wasteful and expensive to have these deadlines set.
For SecOps and DevSecOps teams, this means more time for more strategic tasks like security posture assessment, designing new products and upgrading existing systems..
With a consistent approach, you'll benefit from the following:
- CSNF can help enterprise cloud clients like IT and teams get greater visibility and control over their data security. A more effective approach to cloud governance helps us all.
- It's possible that CSNF can eliminate the barrier to entry that currently stops enterprise customers from using new cloud services by releasing more security resources. Improved end-user cloud governance also encourages enterprises to adopt the cloud, hence increasing provider revenue and establishing a level of trust in the protection of their data.
- Increased security alerts are prompting cloud providers to beef up their engineering teams. In contrast, a shared framework would eliminate the requirement for these additional resources. It may be more cost-effective for vendors to focus on improving their operations and goods than than on specialised demands like dashboards and applications.
Next?
CSNF is in the process of building. There are cloud users who have gathered requirements and are providing input as a prototype is being constructed A multi-cloud security reporting translation tool, Decorator, is now being developed by the cloud providers.
Our world was forever altered by the pandemic, which included new public cloud security issues. Security, resource consumption, and cloud utilisation all benefit from a safer IT environment. Cloud vendors seek to keep the industry ahead of security challenges in an era of rapid digital transformation."