Cloud Storage Security

Description

Cloud Storage Security: A Practical Guide introduces and discusses the risks associated with cloud-based data storage from a security and privacy perspective. Gain an in-depth understanding of the risks and benefits of cloud storage illustrated using a Use-Case methodology. The authors also provide a checklist that enables the user, as well as the enterprise practitioner to evaluate what security and privacy issues need to be considered when using the cloud to store personal and sensitive information.

Describes the history and the evolving nature of cloud storage and security
Explores the threats to privacy and security when using free social media applications that use cloud storage
Covers legal issues and laws that govern privacy, compliance, and legal responsibility for enterprise users
Provides guidelines and a security checklist for selecting a cloud-storage service provider
Includes case studies and best practices for securing data in the cloud
Discusses the future of cloud computing

Front Cover 2
Cloud Storage Security 5
Copyright Page 6
Contents 7
1 Data in the Cloud 9
- 1.1 Definitions and History 9
  - 1.1.1 Definitions 9
  - 1.1.2 History 10
- 1.2 Privacy and Security Concepts and Issues 11
  - 1.2.1 Your Data Versus Other People’s Data 15
  - 1.2.2 Getting Your Data In and Out of the Cloud 18
  - 1.2.3 Legal Versus Criminal Threats 20
    - 1.2.3.1 Legal Threats 20
    - 1.2.3.2 Criminal Threats 22

Front Cover 2
Cloud Storage Security 5
Copyright Page 6
Contents 7
1 Data in the Cloud 9
- 1.1 Definitions and History 9
  - 1.1.1 Definitions 9
  - 1.1.2 History 10
- 1.2 Privacy and Security Concepts and Issues 11
  - 1.2.1 Your Data Versus Other People’s Data 15
  - 1.2.2 Getting Your Data In and Out of the Cloud 18
  - 1.2.3 Legal Versus Criminal Threats 20
    - 1.2.3.1 Legal Threats 20
    - 1.2.3.2 Criminal Threats 22
  - 1.3 Cloud Storage 23
    - 1.3.1 What Is It? 23
    - 1.3.2 Case Studies: Comparison of Cloud Storage Security 24
  - 1.4 Cloud-Based Data Sharing 27
  - References 29
  - 1.5 Summary 29
- 2 Application Data in the Cloud 31
  - 2.1 Applications 32
    - 2.1.1 Email 32
    - 2.1.2 Background 33
    - 2.1.3 Case Studies: Comparison of Cloud-Based Email Security (Gmail, Outlook.com (Hotmail), Yahoo! Mail) 35
      - 2.1.3.1 Questions 35
      - 2.1.3.2 Security Concepts 35
      - 2.1.3.3 Personally Identifiable Information (PII) 36
      - 2.1.3.4 Methods and Results 36
      - 2.1.3.5 Data-in-Motion 36
      - 2.1.3.8 Information Collected by Email Service Providers 37
      - 2.1.3.6 Data at Rest 37
      - 2.1.3.7 Physical Security 37
      - 2.1.3.9 From Google’s Privacy Policy 39
      - 2.1.3.10 How Email Service Providers Use the Information 39
      - 2.1.3.11 Where Email Service Providers Differ 40
      - 2.1.3.12 From Google’s Terms of Service 40
      - 2.1.3.14 From Yahoo! Privacy Policy 41
      - 2.1.3.13 From Outlook.com Privacy Policy 41
      - 2.1.3.16 Conclusion 42
      - 2.1.3.15 Measures That Can Be Taken to Increase Security and Privacy 42
    - 2.2 Cloud Backup Services 42
      - 2.2.1 Background 42
      - 2.2.2 Case Studies: Comparison of Cloud-Based Backup Security 43
        
        2.2.2.1 Questions 43
        
        2.2.2.2 Security Concepts 43
        
        2.2.2.5 Data-in-Motion 44
        
        2.2.2.3 Methods and Results 44
        
        2.2.2.6 Data-at-Rest 44
        
        2.2.2.4 Carbonite 44
        
        2.2.2.7 Facility Security 45
        
        2.2.2.8 Mozy 46
        
        2.2.2.9 Data in Motion and at Rest 46
        
        2.2.2.10 Encryption 46
        
        2.2.2.11 Privacy 48
        
        2.2.2.12 Conclusion 48
      - 2.3 Social Media 48
        
        2.3.1 Social Media as Cloud Storage 48
        
        2.3.2 Case Studies: Comparison of Social Media Security (Facebook and Twitter) 49
        
        2.3.2.1 Questions 49
        
        2.3.2.2 Security Concepts 49
        
        2.3.2.4 Twitter 50
        
        2.3.2.3 Methods and Results 50
        
        2.3.2.5 Twitter Privacy Policy 51
        
        2.3.2.6 Facebook 52
        
        2.3.2.7 How Facebook Uses Data They Collect 55
        
        2.3.2.8 Conclusion 56
        
        2.4 Office Suites 56
        
        2.4.1 Background 56
        
        2.4.2 Case Studies: Comparison of Cloud-Based Office Suite Security (Microsoft Office 365 and Google Docs) 57
        
        2.4.2.3 Google Docs 57
        
        2.4.2.1 Questions 57
        
        2.4.2.2 Security Concepts 57
        
        2.4.2.6 Privacy 58
        
        2.4.2.4 Privacy 58
        
        2.4.2.5 Microsoft Office 365 58
        
        2.4.2.7 Conclusion 59
        
        2.5 Health Apps 59
        
        2.5.1 Background 59
        
        2.5.2 Case Studies 60
        
        2.5.2.1 Security Concepts 60
        
        2.5.2.2 Questions 60
        
        2.5.2.3 Efficacy and Oversight 60
        
        2.5.2.4 Privacy and Security 61
        
        2.5.2.5 Conclusion 62
        
        References 62
        
        2.6 Summary 62
        
        3 Privacy Challenges 65
        
        3.1 Who Wants Your Data? 66
        
        3.2 Privacy and Security Incidents in the News 70
        
        3.3 Legal Issues 71
        
        3.3.1 Travel 72
        
        3.3.2 Location, Location, Location 72
        
        3.3.3 Employers and Insurance Companies 73
        
        3.3.4 Litigation and e-Discovery 74
        
        3.3.5 Law Enforcement 74
        
        3.3.6 Lifestyle and Psychological Profiling 75
        
        3.4 Criminals, Authoritarian Governments, and Friends 76
        
        3.4.2 Authoritarian Governments 76
        
        3.4.1 Criminals 76
        
        3.4.3 Friends 77
        
        References 79
        
        3.5 Summary 79
        
        4 Compliance 83
        
        4.1 Legal Responsibility When Handling Other People’s Data 83
        
        4.2 US Federal Laws and Regulations Affecting Cloud Storage 85
        
        4.2.1 HIPAA 85
        
        4.2.1.1 General Requirements 88
        
        4.2.1.2 Administrative Safeguards 88
        
        4.2.1.3 Technical Safeguards 89
        
        4.2.2 Dodd-Frank 91
        
        4.2.3 Gramm–Leach–Bliley Act 93
        
        4.2.4 SOX 95
        
        4.3 Cloud Storage Provider and Compliance 96
        
        4.4 Laws and Regulations of Other Countries 97
        
        4.4.1 European Data Protection Directive of 1995 98
        
        4.4.1.1 Benefits for EU Citizens 98
        
        4.4.1.2 Benefits for Business 99
        
        4.4.2 United Kingdom’s Data Protection Act 1998 101
        
        4.4.2.1 Data Protection Principles 101
        
        4.4.2.2 Regulation and Enforcement 102
        
        4.4.3 India – Information Technology Act 2000 (IT Act) 103
        
        4.4.3.2 Privacy Policy Compliance 104
        
        4.4.3.1 Sensitive Personal Data 104
        
        4.4.3.3 Security Policy Compliance 105
        
        4.4.3.4 Regulation and Enforcement 105
        
        4.5 Summary 105
        
        References 106
        
        5 Privacy Tools 107
        
        5.1 Two-factor Authentication 107
        
        5.2 Encrypt Yourself 109
        
        5.3 Secure Email for Cloud Storage 110
        
        5.4 Passwords and Encryption Keys 111
        
        5.6 Delete Private Data 113
        
        5.5 Pay for Security 113
        
        5.7 Personal or Distributed Cloud Storage 114
        
        5.8 Security-as-a-Service 118
        
        5.9 Summary 119
        
        References 120
        
        6 Best Practices 121
        
        6.1 What are Best Practices? 121
        
        6.1.1 Cloud Provider’s Physical Security 121
        
        6.1.2 Cloud Provider’s Network Security 122
        
        6.1.3 Encryption/Decryption 122
        
        6.1.4 Authentication and Access Control 123
        
        6.1.5 Disaster Planning 124
        
        6.2 Goals and Questions to Ask About Data Stored in the Cloud 124
        
        6.2.1 Evaluating Data and User Access 124
        
        6.3 Cloud Data Privacy and Security Checklist 126
        
        6.3.4 Cloud Provider Network Security 127
        
        6.3.2 Disaster Planning 127
        
        6.3.3 Cloud Provider Personnel 127
        
        6.3.1 Cloud Provider – Physical Security 127
        
        6.3.7 Data Encryption and Decryption 128
        
        6.3.5 Data in Motion 128
        
        6.3.8 File Content Deletion 128
        
        6.3.8.1 Incident Response 129
        
        6.3.6 Data at Rest 128
        
        6.3.11 Access Control (This Applies to Both Customer and Cloud Service Provider) 129
        
        6.3.9 Authentication 129
        
        6.3.12 Passwords 129
        
        6.3.10 Data Access 129
        
        6.3.14 Third Party Audit 130
        
        6.3.15 Other Things to Consider When Storing Data in the Cloud 130
        
        6.3.13 Legal Jurisdiction and Regulations 130
        
        Reference 131
        
        6.4 Summary 131
        
        7 The Future of Cloud Data Privacy and Security 133
        
        7.1 The Best to Expect in the Near Future 133
        
        7.1.1 Encryption by Default 133
        
        7.1.3 Zero-Knowledge Encryption 134
        
        7.1.4 Anonymity Networks 134
        
        7.1.2 Two-Factor Authentication 134
        
        7.1.6 Home Clouds 135
        
        7.1.5 Monetizing Security and Privacy 135
        
        7.1.7 Security Versus Safety 136
        
        7.2 New Technologies and Old Problems 137
        
        7.2.1 Cloud of Things 137
        
        7.2.2 Future Data Storage 139
        
        7.2.3 Quantum Memory 140
        
        7.2.4 The Future of Storage Technology – DNA 141
        
        7.2.5 Biology to Computer Science 143
        
        7.2.6 DNA Storage and Security 144
        
        7.2.7 The Cloud – Data, Information, Questions 145
        
        References 146

Author's affiliation

Aaron Wheeler: 3 Sigma Research and adjunct faculty, Valenci
Michael Winburn: Founder, 3 Sigma Research, FL, USA

A Practical Guide

Description

TOC

Reviews (0)

Author's affiliation