{"id":11918,"date":"2021-08-10T15:36:08","date_gmt":"2021-08-10T15:36:08","guid":{"rendered":"http:\/\/ismiletechnologies.com\/?p=11918"},"modified":"2022-10-06T17:22:04","modified_gmt":"2022-10-06T11:52:04","slug":"common-security-risks-involved-in-cloud","status":"publish","type":"post","link":"https:\/\/ismiletechnologies.com\/en_us\/cloud-services\/common-security-risks-involved-in-cloud\/","title":{"rendered":"Common security risks involved in cloud"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Migrating&nbsp;applications, systems&nbsp;and workloads to cloud offers you the advantage of&nbsp;flexibility&nbsp;of scaling, reduction of costs in the usage of storage and compute with pay as you use model and many others. AS with other ecosystems, there are some common security concerns of operating in the cloud. Below I have mentioned all the major security concerns&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Data Theft and modification- If your cloud provider has not enforced all the security controls and measures for restricting unauthorized access or some loophole or vulnerability in the process has been exploited by non-desired users, it may lead to sensitive data falling in the hands of someone else. The data properties in the cloud may be modified thereby making certain data elements&nbsp;inaccessible&nbsp;to the users, the data may be corrupted making it ineligible to be used by the users.&nbsp;<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">Some stats to validate data theft concerns&nbsp;<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li><em>On 22<\/em><em><sup>nd<\/sup><\/em><em>&nbsp;Jan, 2020, a certain customer database carrying 280 million+ Microsoft customer records was found unprotected online<\/em><em>(<\/em><a href=\"https:\/\/www.identityforce.com\/blog\/2020-data-breaches%22%20\/t%20%22_blank\" target=\"_blank\" rel=\"noreferrer noopener\"><em>IdentityForce<\/em><\/a><em>).<\/em>&nbsp;<\/li><\/ol>\n\n\n\n<ol class=\"wp-block-list\" start=\"2\"><li><em>On 20th August, 2020,&nbsp;Comparitech&nbsp;Researchers found 235 million + Instagram, tik&nbsp;tok&nbsp;and&nbsp;YouTube&nbsp;user profiles in an unsecured database&nbsp;<\/em><em>(<\/em><a href=\"https:\/\/www.identityforce.com\/blog\/2020-data-breaches%22%20\/t%20%22_blank\" target=\"_blank\" rel=\"noreferrer noopener\"><em>IdentityForce<\/em><\/a><em>).<\/em>&nbsp;<\/li><\/ol>\n\n\n\n<p class=\"wp-block-paragraph\">These are just some of the instances out of hundreds occurring everyday and the majority of them are&nbsp;result of&nbsp;cloud-based&nbsp;security loopholes&nbsp;&nbsp;<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li>Malware and DOS attacks- Enormously high volume of traffic to the system may increase the chances of malware and DOS attacks. The hackers can send high volume of traffic to\u00a0web-based\u00a0applications causing the server crash.\u00a0<\/li><li>Incomplete SLA based risk analysis- If the SLA based risk analysis is not comprehensive taking into account every element of the functioning on cloud, it may happen that there are chances of vulnerabilities in the cloud infrastructure which may be used for data breaches and unauthorized access by other parties. Reviewing the terms of SLAs to include all possible security measures is of utmost importance.\u00a0<\/li><li>Vendor Lock-in-Vendor lock-in creates some of the biggest risks in cloud services. When transferring from one vendor to other or from one cloud to other, the systems and components may develop vulnerabilities of breaches and attacks.\u00a0\u00a0<\/li><\/ul>\n\n\n\t\t<div data-elementor-type=\"section\" data-elementor-id=\"33253\" class=\"elementor elementor-33253\" data-elementor-post-type=\"elementor_library\">\n\t\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-1f27ef0 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"1f27ef0\" data-element_type=\"section\" data-e-type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;gradient&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-100 elementor-top-column elementor-element elementor-element-c65c317\" data-id=\"c65c317\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-dc3c880 elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"dc3c880\" data-element_type=\"section\" data-e-type=\"section\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-33 elementor-inner-column elementor-element elementor-element-3248be5\" data-id=\"3248be5\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-5886bd6 elementor-widget elementor-widget-heading\" data-id=\"5886bd6\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Ready to experience the full power of cloud technology?<\/h2>\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1f56c4e elementor-widget elementor-widget-text-editor\" data-id=\"1f56c4e\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t\t\t\t\t\t<p><span class=\"TextRun Highlight SCXW216552313 BCX0\" lang=\"EN-IN\" xml:lang=\"EN-IN\" data-contrast=\"none\"><span class=\"NormalTextRun SCXW216552313 BCX0\">Our cloud experts will speed up cloud deployment, and make your business more efficient.\u00a0<\/span><\/span><span class=\"EOP SCXW216552313 BCX0\" data-ccp-props=\"{&quot;201341983&quot;:0,&quot;335559739&quot;:160,&quot;335559740&quot;:259}\">\u00a0<\/span><\/p>\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-33 elementor-inner-column elementor-element elementor-element-4b7dd61\" data-id=\"4b7dd61\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-81f081a elementor-align-center elementor-widget elementor-widget-lottie\" data-id=\"81f081a\" data-element_type=\"widget\" data-e-type=\"widget\" data-settings=\"{&quot;source&quot;:&quot;external_url&quot;,&quot;source_external_url&quot;:{&quot;url&quot;:&quot;https:\\\/\\\/assets4.lottiefiles.com\\\/packages\\\/lf20_kkesf8mx.json&quot;,&quot;is_external&quot;:&quot;&quot;,&quot;nofollow&quot;:&quot;&quot;,&quot;custom_attributes&quot;:&quot;&quot;},&quot;loop&quot;:&quot;yes&quot;,&quot;play_speed&quot;:{&quot;unit&quot;:&quot;px&quot;,&quot;size&quot;:0.9,&quot;sizes&quot;:[]},&quot;lazyload&quot;:&quot;yes&quot;,&quot;link_to&quot;:&quot;none&quot;,&quot;trigger&quot;:&quot;arriving_to_viewport&quot;,&quot;viewport&quot;:{&quot;unit&quot;:&quot;%&quot;,&quot;size&quot;:&quot;&quot;,&quot;sizes&quot;:{&quot;start&quot;:0,&quot;end&quot;:100}},&quot;start_point&quot;:{&quot;unit&quot;:&quot;%&quot;,&quot;size&quot;:0,&quot;sizes&quot;:[]},&quot;end_point&quot;:{&quot;unit&quot;:&quot;%&quot;,&quot;size&quot;:100,&quot;sizes&quot;:[]},&quot;renderer&quot;:&quot;svg&quot;}\" data-widget_type=\"lottie.default\">\n\t\t\t\t\t<div class=\"e-lottie__container\"><div class=\"e-lottie__animation\"><\/div><\/div>\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-33 elementor-inner-column elementor-element elementor-element-ac6262c\" data-id=\"ac6262c\" data-element_type=\"column\" data-e-type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t<div class=\"elementor-element elementor-element-e19f719 elementor-align-right elementor-mobile-align-left elementor-tablet-align-right elementor-widget elementor-widget-button\" data-id=\"e19f719\" data-element_type=\"widget\" data-e-type=\"widget\" data-widget_type=\"button.default\">\n\t\t\t\t\t\t\t\t\t\t<a class=\"elementor-button elementor-button-link elementor-size-xs\" href=\"#elementor-action%3Aaction%3Dpopup%3Aopen%26settings%3DeyJpZCI6IjI5OTEiLCJ0b2dnbGUiOnRydWV9\">\n\t\t\t\t\t\t<span class=\"elementor-button-content-wrapper\">\n\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Start Today !<\/span>\n\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t<\/div>\n\t\t\n\n\n\n<ul class=\"wp-block-list\"><li>Contractual breaches- Every business contract is defined by a set of agreed upon rules by the parties involved.&nbsp;Now,&nbsp;if the clause of maintaining security of sensitive data and providing authorization of usage of the data has not been clearly elaborated, then it may result in contract violation. For&nbsp;example,&nbsp;if a user is not authorized to change the data location and he\/she does the same by transferring it to cloud, it may result in conflicts and litigations. This&nbsp;generally happens in enterprises or companies where the business entities do not have a clear goal of the cloud services they are planning to have.&nbsp;<\/li><li>Non-maintenance of API&nbsp;hygiene- API must be designed for complete authentication, maintaining the access hierarchy and should be adequately encrypted. API keys must be secured and should not be reused. In case of insecure APIs, where any one of these measures are lacking, unauthorized access to data and systems can take place.&nbsp;<\/li><\/ul>\n\n\n\n<p class=\"wp-block-paragraph\">According to Imperva \u201cAn&nbsp;API security survey revealed that on average companies manage 363 different APIs, and that two-thirds (69 percent) of organizations are exposing APIs to the public and their partners.&nbsp;As noted, public-facing APIs are a key security concern because they are a direct vector to the sensitive data behind applications. Asked about their main API security concern, respondents stated they are most worried about DDoS attacks and bots while 24 percent said they are most concerned about authentication enforcement.\u201d&nbsp;<\/p>\n\n\n\n<figure><img fetchpriority=\"high\" decoding=\"async\" src=\"http:\/\/ismiletechnologies.com\/wp-content\/uploads\/2021\/08\/image-16.png\" alt=\"\" width=\"462\" height=\"262\"\/><\/figure>\n\n\n<h4>Contact Our Cloud Security experts<\/h4>\n<h2><\/h2>\n<p><\/p>\n<p><a href=\"http:\/\/ismiletechnologies.com\/request-a-consultation\/\">Get Free Consultation<\/a><\/p>","protected":false},"excerpt":{"rendered":"<p>Migrating&nbsp;applications, systems&nbsp;and workloads to cloud offers you the advantage of&nbsp;flexibility&nbsp;of scaling, reduction of costs in the usage of storage and compute with pay as you use model and many others. AS with other ecosystems, there are some common security concerns of operating in the cloud. Below I have mentioned all the major security concerns&nbsp; Data [&hellip;]<\/p>\n","protected":false},"author":3,"featured_media":11925,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[81],"tags":[95],"class_list":["post-11918","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-cloud-services","tag-cloud"],"_links":{"self":[{"href":"https:\/\/ismiletechnologies.com\/en_us\/wp-json\/wp\/v2\/posts\/11918","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/ismiletechnologies.com\/en_us\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/ismiletechnologies.com\/en_us\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/ismiletechnologies.com\/en_us\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/ismiletechnologies.com\/en_us\/wp-json\/wp\/v2\/comments?post=11918"}],"version-history":[{"count":2,"href":"https:\/\/ismiletechnologies.com\/en_us\/wp-json\/wp\/v2\/posts\/11918\/revisions"}],"predecessor-version":[{"id":33675,"href":"https:\/\/ismiletechnologies.com\/en_us\/wp-json\/wp\/v2\/posts\/11918\/revisions\/33675"}],"wp:attachment":[{"href":"https:\/\/ismiletechnologies.com\/en_us\/wp-json\/wp\/v2\/media?parent=11918"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/ismiletechnologies.com\/en_us\/wp-json\/wp\/v2\/categories?post=11918"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/ismiletechnologies.com\/en_us\/wp-json\/wp\/v2\/tags?post=11918"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}