What exactly is the cloud and how does it work?
More and more of our daily lives takes place online, from banking and schooling to working and family gatherings, even more so amid the coronavirus pandemic. The cloud is the invisible computing architecture that keeps many of these digital platforms and tools running smoothly. Really, being in the cloud just means storing data on someone elses computer. A few major tech companies run massive global networks of data centers, linked with ocean-spanning fiber-optic cables and complex systems of integrated hardware and software. So there is no single cloud per se. Rather, companies like Amazon, Microsoft, and Google each run their own systems, almost like parallel internets. The risks of a companys whole cloud system going down at once are miniscule, though isolated outages of particular cloud services do happen.
Many internet users are seeing firsthand how disruptive it can be when the online tools they are relying on unexpectedly go offline or experience other bugs. For instance, when the videoconferencing software Zoom went offline for several hours one day in late August 2020, virtual classes around the United States were disrupted.
Dr. Tim Maurer is co-director of the Cyber Policy Initiative and a senior fellow at the Carnegie Endowment for International Peace. An expert on cybersecurity and geopolitics of the digital age, he currently focuses on the emerging global order for cybersecurity and the financial system.
Taking a step back, the pandemic has accelerated a decade-long transformation that was already under way. Many companies, governments, and ordinary people alike are switching from onsite information technology (IT) infrastructure to cloud computing, which provides data storage and processing services remotely. The good news is that many cloud companies have hired seasoned professional security teams with highly technical skills to protect the cloud infrastructure.
The bad news is that, as more and more people use and depend on the cloud, the risks and consequences of a systemic failure increase. Each of the major cloud providers have set up their systems to be as resilient as possible to any single-point failurethats why the risk of the whole cloud going down at once is exceedingly small. But that doesnt mean that it is immune to threatsthere are many ways that cloud services could be compromised or disrupted.
A few massive companies dominate the cloud computing market. These large cloud companies have the deep pockets and highly trained personnel needed to design and manage systems that are extremely secure and highly resilient to various risks of failure. That is why, as a rule, it is far more secure for most companies, organizations, and people to store their online data in the cloud rather than try to protect it themselves.
But theres a catch. Hackers and other nefarious criminals know that if they compromise a cloud provider, they can essentially scoop up the valuable data of many targets at once. This risk is called the Fort Knox dilemma: the data stores of cloud companies are highly protected but also highly prized targets. Theres a reason the Oceans Eleven cast targeted a casino instead of a convenience store.
Garrett Hinck was a research assistant with the Nuclear Policy Program at the Carnegie Endowment for International Peace.
And that isnt the only issue. The potential for threats against the cloud to create systemic risk are becoming increasingly apparent. A major cyber incident could have industry-wide or even economy-spanning effects, impacting financial services or triggering a temporary outage that prevents cloud clients from processing critical data like health insurance records.
Thankfully, the chances of an incident shutting down an entire cloud provider are exceedingly low: they make their systems as resilient as possible to keep that from happening. However, if one critical cloud-based dataset or process (like an algorithm for adjusting insurance claims, for example) failed, there could be significant consequences. Thats why its so important to understand the potential consequences of threats to cloud customers data as thoroughly as possible. As more and more critical data, like financial transactions and health records, are stored in the cloud, the consequences of major breaches will only increase.
The cloud is not invulnerable to hackers. While cloud providers can create secure environments, some vulnerabilities remain, and the security of the environment still also depends on their clients to store data securely. Cloud companies and the customers they serve both have important roles to play to keep data safe, and they divide up the responsibilities for data security accordingly. To use an analogy, it is not enough for a cloud provider to design a highly secure virtual safe: customers also have to be sure to set a good combination and keep that information from prying eyes.
In July 2019, for instance, a hacker broke into the cloud-based databases that stored personal information of Capital One credit card applicants and later attempted to sell the stolen information online. Personal information sold on the dark web can then be used by criminals for identity theft and other forms of fraud. This incident illustrates the damage that can ensue when security measures are breached.
Hackers arent the only risk facing the cloud or even the most common one. Cloud services can be disrupted by many unforeseen events including lightning strikes or flooding at data centers or even human error. In one notable incident, a typo by an Amazon engineer took the companys cloud storage service offline for many U.S.-based customers for four hours. These risks can have significant ripple effects because cloud services are complex and often rely on convoluted, interdependent internal systems. A failure can have outsize and unpredictable effects.
Additionally, vulnerabilities wired into the hardware and coded into the software that run the cloud can have broad impacts. The Meltdown and Spectre vulnerabilities, which affected the chips used in cloud servers, could have allowed attackers to spy on other cloud customers data. Cloud companies made herculean efforts to address these vulnerabilities and build a fix before the bugs became public in early 2018, underscoring their potential impact.
As organizations migrate to the cloud, responsibility for security becomes shared between cloud service providers and the organizations they serve. Having a clear understanding of who is responsible for what, especially where aspects of that responsibility are shared, is critical for pulling off a migration that leads to greater security, not less. Cloud service providers already assist their customers with facilitating this transition, and as they expand their business in the United States and abroad, it will be important that this assistance is scaled accordingly and provided equitably.
It is also clear that some reams of data are more important than others. The Health Insurance Portability and Accountability Act in the United States, for example, specifically protects medical data. Financial regulators focus on data and processes critical for the functioning of the financial system. It will become more important going forward for experts to open up the black box of cloud service providers and assess and protect risk based on how critical a particular set of data and associated services are. Finally, the tech industry remains a nascent sector. Unlike other sectors like aviation or finance, mechanisms to cooperate remain very limited among the main cloud service providers and competition even trumps shared security concerns.
- How to use cloud storage as a creative - Creative Bloq - January 25th, 2021
- Cloud storage for photos and images: How to choose the best cloud for your work - Creative Bloq - January 25th, 2021
- OVHcloud Teams with IBM and Atempo for Cloud Storage - insideHPC - January 25th, 2021
- Cloud Storage Software Market to witness an impressive growth during the foreca - Business-newsupdate.com - January 25th, 2021
- Global Media and Entertainment Digital Storage Report 2020: Focus on Content Acquisition, Editing, Archiving and Digital Preservation, Broadcast,... - January 25th, 2021
- OVHcloud Teams with IBM and Atempo on Storage-as-a-Service Offering - HPCwire - January 25th, 2021
- The best outdoor home security cameras of 2021 - CNET - January 25th, 2021
- More businesses willing to place trust in cloud since start of pandemic - ITProPortal - January 25th, 2021
- Kyligence Launches Cloud-Native Edition Of Its Big Data Platform - CRN - January 25th, 2021
- ECLIPSE TECH PARTNERS WITH WASABI TO DELIVER HIGH PERFORMANCE HOT CLOUD STORAGE AT COLD STORAGE PRICING - The Herald Journal - December 17th, 2020
- Amber X is a privacy-focused in-home cloud storage for your photos you can access anywhere - DIYphotography - December 17th, 2020
- Trend Micro Cloud One - File Storage Security: Designed to mitigate threats across the cloud - Help Net Security - December 17th, 2020
- Google is finally making it easier to search your Drive cloud storage on mobile - TechRadar - December 17th, 2020
- Wondershare's Document Cloud is the best way to back up your files - Pocket-lint - December 17th, 2020
- Why cloud vendors are investing in new sources of compute power - VentureBeat - December 17th, 2020
- How to Send Large Files Over the Internet - PCMag UK - December 17th, 2020
- Swedish university fined $66,000 for GDPR violations - The Daily Swig - December 17th, 2020
- Apache Pulsar vs. Kafka and other data processing technologies - TechTarget - December 17th, 2020
- Global Cloud Storage Service Market: Current Status, In-depth Analysis and Forecast Outlook 2026 By Red Hat, Inc., Zadara Storage, IBM Corporation,... - December 17th, 2020
- Online Harms in the UK: Significant new obligations for online companies and fines of up to 10% of annual global turnover for breach - Lexology - December 17th, 2020
- 10 Ways To Boost Cloud Performance - CRN - December 17th, 2020
- Explained: How the changes in Google free cloud storage policy will impact you - The Indian Express - December 9th, 2020
- Here are the Top 5 Encrypted Cloud Storage Services - The Mac Observer - December 9th, 2020
- Object Matrix Joins the Active Archive Alliance - insideHPC - December 9th, 2020
- What Is Public Cloud and Is It Right for Your Business? - G2 - December 9th, 2020
- Looking into the crystal ball: Tech predictions for 2021 - ITProPortal - December 9th, 2020
- How can the cloud industry adapt to a post-COVID world? - IT PRO - December 9th, 2020
- The National Institute for Health Research on connecting through cloud to fight Covid-19 - ComputerWeekly.com - December 9th, 2020
- Zoom recordings will be deleted after six months - The Daily Evergreen - December 9th, 2020
- Global Trend Expected to Guide Private Cloud Storage Market from 2020-2026: Growth Analysis by Manufacturers, Regions, Type and Application - Murphy's... - December 9th, 2020
- The Airbnb of Cloud storage has amassed one million TB of storage worldwide - TechRadar - November 28th, 2020
- A Guide to Storing Your Business Insurance Documents Online - Live Insurance News - November 28th, 2020
- Back up and lock down: Save over 90% on these VPN and cloud storage subscriptions - XDA Developers - November 28th, 2020
- Global Cloud Storage Market Size-Share Analysis and System Production (2020-2026) | Addressing the Potential Impact of COVID-19 by Zion Market... - November 28th, 2020
- Global Cloud Storage Industry Market 2020 | Research Report CAGR Growth of 24-26% and Predictive Business Strategy by 2025 - Cheshire Media - November 28th, 2020
- Cloud tiering: picking the right cloud tier for short and long term storage - Information Age - November 28th, 2020
- Migrating From Dropbox To Google Drive in 2020: Cloud Swapping - Cloudwards - November 28th, 2020
- Protect Yourself Online With These 5 Essential Security Apps - MakeUseOf - November 28th, 2020
- The 2020 Distributed Storage Summit Ended Successfully, and XnMatrix Fully Covered the Decentralized Cloud Computing Industry Ecology - IT News Online - November 28th, 2020
- Google: We're capping your free cloud storage at 15GB starting next year - TechRepublic - November 16th, 2020
- Google Photos a reminder that cloud storage isn't infinite - TechHQ - November 16th, 2020
- What is the cheapest way to save all those photos in your phone? - Mint - November 16th, 2020
- What is OneDrive? Everything you need to know about Microsoft's cloud storage service - Business Insider - Business Insider - November 13th, 2020
- Samsung Cloud storage shutdown: Everything you need to know - Tom's Guide - November 13th, 2020
- InfluxData adds yet another 2.0 platform and opens a new front to cloud storage - ZDNet - November 13th, 2020
- This week in storage with Kioxia and Elastic Blocks and Files - Blocks and Files - November 13th, 2020
- Global Business Cloud Storage Market Report With in Depth Analysis by Top Key Players- Zoolz OpenDrive JustCloud MozyPro Egnyte CrashPlan Dropbox... - November 13th, 2020
- Global Business Cloud Storage Market 2020 Industry Analysis, Size, Share, Strategies and Forecast to 2026 Wall Street Call - Reported Times - November 13th, 2020
- Cloud Storage Gateway Market Key Players, Product and Production Information analysis and forecast to 2026 - Zenit News - November 13th, 2020
- Cloud Storage Market Consumption Analysis, Business Overview and Upcoming Trends Forecast by 2026 - The Daily Philadelphian - November 13th, 2020
- IMT partners with Dalet to simplify AI and media storage in the cloud - KMWorld Magazine - October 29th, 2020
- NetApp CEO George Kurian: The Digital Economy 'Rewrites The Rules' - CRN: Technology news for channel partners and solution providers - October 29th, 2020
- Catalogic Software Expands its Smart Data Suite to Cloud Storage and Cloud Native Applications - PR Web - October 29th, 2020
- Global Cloud Storage Market Report Forecast to 2025 by Global Market Insights, Key Companies and Driving Trends| Zoolz, OpenDrive, JustCloud, MozyPro,... - October 29th, 2020
- Sycomp launches an unmatched cloud data experience with Sycomp Storage Fueled by IBM Spectrum Scale on Azure - AiThority - October 29th, 2020
- Global Cloud Storage Providers Market Expected To Reach Highest CAGR By 2026: Pertino, Asigra, SoftLayer, StorageCraft, Dropbox etc. - The Think... - October 27th, 2020
- NetApp plays Spot the difference in cloud services build-out Blocks and Files - Blocks and Files - October 27th, 2020
- Private Cloud Storage Market Analysis, Growth Forecast Analysis by Manufacturers, Regions, Type and Application to 2026 - TechnoWeekly - October 27th, 2020
- Global Cloud Storage Software Market Growth, Demand And Threats Analysis 2020 By Regional Overview Of Leading Players, Types, Application and Forecast... - October 27th, 2020
- Tag: Cloud Storage - The Think Curiouser - October 27th, 2020
- Cloud Object Storage Market Analysis 2020-2027: by Key Manufacturers with Countries, Types, Application and Forecast Till 2027 - The Think Curiouser - October 27th, 2020
- Cloud Storage Software Market (2020 to 2025) | Growing Application in Industry, Presents Opportunities and Demand Analysis, Growth, Size and Share -... - October 27th, 2020
- Cloud Storage Market: Qualitative Analysis of the Leading Players and Competitive Industry Scenario, 2023 - The Think Curiouser - October 27th, 2020
- Backblaze B2 Cloud Storage Integrated With Facebook as Photo and Video Transfer Destination - PRNewswire - October 24th, 2020
- Enterprise Data Cloud Storage Software Market is projected to grow at High CAGR during the forecast period, 2026 | MailChimp, Constant Contact,... - October 24th, 2020
- Cloud Storage Software Industry Market 2020: Industry Growth, Competitive Analysis, Future Prospects and Forecast 2026 - PRnews Leader - October 24th, 2020
- 5 top tips for businesses in data backup and recovery - Tom's Guide - October 24th, 2020
- Unified file and object storage: The best of both worlds? - ComputerWeekly.com - October 24th, 2020
- Business Cloud Storage market will continue to boom says analyst - Eurowire - October 24th, 2020
- Veeam Enhances Offerings To Be A 'Perfect' Fit For MSPs - CRN: Technology news for channel partners and solution providers - October 24th, 2020
- Cloud Storage Gateway Market Globally Expected to Drive Growth through 2026 - KYT24 - October 24th, 2020
- BTFS is Poised to Disrupt the Cloud Storage Industry? - ihodl.com - October 15th, 2020
- Reducing cloud storage costs: what you need to know - ITProPortal - October 15th, 2020
- Save an extra 20% on VPNs, password managers, and cloud storage - Mashable - October 15th, 2020
- Cohesity hooks up with AWS to pipe data management-as-a-service at users, starting with backup - Blocks and Files - October 15th, 2020
- The Best Backup and Restore Courses and Online Training for 2020 - Solutions Review - October 15th, 2020
- NetApp Insight 2020 conference news and coverage - TechTarget - October 15th, 2020
- iPad productivity tips: Keyboard tricks, shortcuts, and more - Fast Company - October 15th, 2020
- Cloud At The Edge, GPU Storage And LTO Gen 9 - Forbes - September 25th, 2020
- Zoom is being sued over its cloud storage practices - TechRadar - September 25th, 2020