What exactly is the cloud and how does it work?
More and more of our daily lives takes place online, from banking and schooling to working and family gatherings, even more so amid the coronavirus pandemic. The cloud is the invisible computing architecture that keeps many of these digital platforms and tools running smoothly. Really, being in the cloud just means storing data on someone elses computer. A few major tech companies run massive global networks of data centers, linked with ocean-spanning fiber-optic cables and complex systems of integrated hardware and software. So there is no single cloud per se. Rather, companies like Amazon, Microsoft, and Google each run their own systems, almost like parallel internets. The risks of a companys whole cloud system going down at once are miniscule, though isolated outages of particular cloud services do happen.
Many internet users are seeing firsthand how disruptive it can be when the online tools they are relying on unexpectedly go offline or experience other bugs. For instance, when the videoconferencing software Zoom went offline for several hours one day in late August 2020, virtual classes around the United States were disrupted.
Dr. Tim Maurer is co-director of the Cyber Policy Initiative and a senior fellow at the Carnegie Endowment for International Peace. An expert on cybersecurity and geopolitics of the digital age, he currently focuses on the emerging global order for cybersecurity and the financial system.
Taking a step back, the pandemic has accelerated a decade-long transformation that was already under way. Many companies, governments, and ordinary people alike are switching from onsite information technology (IT) infrastructure to cloud computing, which provides data storage and processing services remotely. The good news is that many cloud companies have hired seasoned professional security teams with highly technical skills to protect the cloud infrastructure.
The bad news is that, as more and more people use and depend on the cloud, the risks and consequences of a systemic failure increase. Each of the major cloud providers have set up their systems to be as resilient as possible to any single-point failurethats why the risk of the whole cloud going down at once is exceedingly small. But that doesnt mean that it is immune to threatsthere are many ways that cloud services could be compromised or disrupted.
A few massive companies dominate the cloud computing market. These large cloud companies have the deep pockets and highly trained personnel needed to design and manage systems that are extremely secure and highly resilient to various risks of failure. That is why, as a rule, it is far more secure for most companies, organizations, and people to store their online data in the cloud rather than try to protect it themselves.
But theres a catch. Hackers and other nefarious criminals know that if they compromise a cloud provider, they can essentially scoop up the valuable data of many targets at once. This risk is called the Fort Knox dilemma: the data stores of cloud companies are highly protected but also highly prized targets. Theres a reason the Oceans Eleven cast targeted a casino instead of a convenience store.
Garrett Hinck was a research assistant with the Nuclear Policy Program at the Carnegie Endowment for International Peace.
And that isnt the only issue. The potential for threats against the cloud to create systemic risk are becoming increasingly apparent. A major cyber incident could have industry-wide or even economy-spanning effects, impacting financial services or triggering a temporary outage that prevents cloud clients from processing critical data like health insurance records.
Thankfully, the chances of an incident shutting down an entire cloud provider are exceedingly low: they make their systems as resilient as possible to keep that from happening. However, if one critical cloud-based dataset or process (like an algorithm for adjusting insurance claims, for example) failed, there could be significant consequences. Thats why its so important to understand the potential consequences of threats to cloud customers data as thoroughly as possible. As more and more critical data, like financial transactions and health records, are stored in the cloud, the consequences of major breaches will only increase.
The cloud is not invulnerable to hackers. While cloud providers can create secure environments, some vulnerabilities remain, and the security of the environment still also depends on their clients to store data securely. Cloud companies and the customers they serve both have important roles to play to keep data safe, and they divide up the responsibilities for data security accordingly. To use an analogy, it is not enough for a cloud provider to design a highly secure virtual safe: customers also have to be sure to set a good combination and keep that information from prying eyes.
In July 2019, for instance, a hacker broke into the cloud-based databases that stored personal information of Capital One credit card applicants and later attempted to sell the stolen information online. Personal information sold on the dark web can then be used by criminals for identity theft and other forms of fraud. This incident illustrates the damage that can ensue when security measures are breached.
Hackers arent the only risk facing the cloud or even the most common one. Cloud services can be disrupted by many unforeseen events including lightning strikes or flooding at data centers or even human error. In one notable incident, a typo by an Amazon engineer took the companys cloud storage service offline for many U.S.-based customers for four hours. These risks can have significant ripple effects because cloud services are complex and often rely on convoluted, interdependent internal systems. A failure can have outsize and unpredictable effects.
Additionally, vulnerabilities wired into the hardware and coded into the software that run the cloud can have broad impacts. The Meltdown and Spectre vulnerabilities, which affected the chips used in cloud servers, could have allowed attackers to spy on other cloud customers data. Cloud companies made herculean efforts to address these vulnerabilities and build a fix before the bugs became public in early 2018, underscoring their potential impact.
As organizations migrate to the cloud, responsibility for security becomes shared between cloud service providers and the organizations they serve. Having a clear understanding of who is responsible for what, especially where aspects of that responsibility are shared, is critical for pulling off a migration that leads to greater security, not less. Cloud service providers already assist their customers with facilitating this transition, and as they expand their business in the United States and abroad, it will be important that this assistance is scaled accordingly and provided equitably.
It is also clear that some reams of data are more important than others. The Health Insurance Portability and Accountability Act in the United States, for example, specifically protects medical data. Financial regulators focus on data and processes critical for the functioning of the financial system. It will become more important going forward for experts to open up the black box of cloud service providers and assess and protect risk based on how critical a particular set of data and associated services are. Finally, the tech industry remains a nascent sector. Unlike other sectors like aviation or finance, mechanisms to cooperate remain very limited among the main cloud service providers and competition even trumps shared security concerns.
- BTFS is Poised to Disrupt the Cloud Storage Industry? - ihodl.com - October 15th, 2020
- Reducing cloud storage costs: what you need to know - ITProPortal - October 15th, 2020
- Save an extra 20% on VPNs, password managers, and cloud storage - Mashable - October 15th, 2020
- Cohesity hooks up with AWS to pipe data management-as-a-service at users, starting with backup - Blocks and Files - October 15th, 2020
- The Best Backup and Restore Courses and Online Training for 2020 - Solutions Review - October 15th, 2020
- NetApp Insight 2020 conference news and coverage - TechTarget - October 15th, 2020
- iPad productivity tips: Keyboard tricks, shortcuts, and more - Fast Company - October 15th, 2020
- Cloud At The Edge, GPU Storage And LTO Gen 9 - Forbes - September 25th, 2020
- Zoom is being sued over its cloud storage practices - TechRadar - September 25th, 2020
- Microsofts storage dream: a hard disk drive the size of a wardrobe with Samsung Galaxy S20 parts - TechRadar - September 25th, 2020
- How to Access S3 Buckets from Windows or Linux - ITPro Today - September 25th, 2020
- There is a hole in my cloud bucket - Fudzilla - September 25th, 2020
- Red Hat shifts automated data pipeline into OpenShift Blocks and Files - Blocks and Files - September 25th, 2020
- Seagate gets into object storage with new CORTX software Blocks and Files - Blocks and Files - September 25th, 2020
- Kioxia's Ethernet SSD stirs into EBOF life as architects dream - Blocks and Files - September 25th, 2020
- Ceph scales to 10 billion objects Blocks and Files - Blocks and Files - September 25th, 2020
- Google accused of using its online dominance to hold back competitors; to face antitrust lawsuit: Report - Times Now - September 25th, 2020
- Synology DiskStation can keep your digital life organized and safe - The Dallas Morning News - September 25th, 2020
- Looking for a job? The Library is here to help! | Globe Times - swglobetimes.com - September 25th, 2020
- Multi Cloud Storage Market is Projected to Increment at an Eye-Catching CAGR by 2023 | 21.2% CAGR | Know the COVID19 Impact - Verdant News - September 25th, 2020
- Internet of Things (IoT) Cloud Platform Market: Demand Rate with Regional Outlook, Applications, Consumer Profiles & Forecast 2026 - The Daily... - September 25th, 2020
- This tiny CPU firm could play a key role in the future of Apple One - TechRadar - September 25th, 2020
- Could Snowflake Rival Amazon in Cloud Storage and Services? Here's What You Need to Know About the New So - Tech Times - September 15th, 2020
- How to approach IT logging in the cloud vs. on premises - TechTarget - September 15th, 2020
- This lifetime web hosting subscription comes with up to 1TB of storage - Mashable - September 15th, 2020
- Keep It in the Cloud! Best Cloud Storage Systems of 2020 - iDrop News - September 6th, 2020
- Impact of COVID-19 on Cloud Storage Software Market 2025 Expected to reach Highest CAGR including major key players Amazon Web Services, Microsoft,... - September 6th, 2020
- Facebook adds cloud storage providers Dropbox and Koofr to its photo and video portability tool - Digital Information World - September 6th, 2020
- Cloud storages you need to know - The Star, Kenya - September 6th, 2020
- How COVID-19 is Impacting the Consumer Cloud Storage Services Market by Industry Analysis, by Type, Application and Top Players:Apple, Google, Box,... - September 6th, 2020
- Cloud Storage Gateway Market to Witness Stunning Growth by 2027; Key Players are Riverbed Technology, SoftNAS, Inc., Oracle, Microsoft, Nasuni... - September 6th, 2020
- COVID-19 Is Driving a Cloud Computing Surge That Will Only Continue | Opinion - Newsweek - September 6th, 2020
- Asia Pacific Personal Cloud Market Industry Analysis and Market Forecast (2019-2026) _ Hosted Types, Revenues, User Type, and Geography. - Galus... - September 6th, 2020
- Amazon's Blink Unveils New Wireless Security Cameras with HD Video, Flexible Storage Options, and New Battery Expansion Pack Cameras Start at $79.99... - September 2nd, 2020
- Cloud Storage Software Market Will Raise Beyond Imagination over Period 2025 | Microsoft, Oracle, Rackspace Hosting, Red Hat, IBM - Scientect - September 2nd, 2020
- Stand Alone Cloud Storage Market Current Industry Size and Future Prospective with Key Players, Drivers and Trends - The Daily Chronicle - September 2nd, 2020
- Media And Entertainment Storage TAM To Exceed $16B By 2025 - Forbes - September 2nd, 2020
- The Launching Ceremony for XnMatrix Wrapped Up, the Next Generation of Cloud Computing Eco-System Sets Sail - PRNewswire - September 2nd, 2020
- Why not open our own Container Registry, muses GitHub as it gives orgs a hand at resource-sharing DEVCLASS - DevClass - September 2nd, 2020
- Sharing responsibility: Why we need to work together to keep the cloud secure - ComputerWeekly.com - September 2nd, 2020
- Data breach exposes tens of thousands of NSW drivers licences online - ABC News - September 2nd, 2020
- 10 Key Takeaways From NetApp CEO George Kurian: Cloud, Coronavirus And Growth - CRN: Technology news for channel partners and solution providers - September 2nd, 2020
- Responding to Cloud Misconfigurations with Security Automation and Common-Sense Tips - Security Boulevard - September 2nd, 2020
- How to Prepare for the Next Time the Cloud Goes Down - Gizmodo - September 2nd, 2020
- Demand for Consumer Cloud Storage Services Market from Major End-use Sectors to Increase in the Near Future - The Scarlet - August 29th, 2020
- Prevent the storage and data security risks of remote work - TechTarget - August 29th, 2020
- Samsung kills Gallery Sync and Drive support in favor of OneDrive - Android Central - August 29th, 2020
- 4 great Android apps to edit the perfect photo - Phandroid - News for Android - August 29th, 2020
- Google Cloud and STS to Automate US Navy Maintenance Inspections Using AI and ML Technology - PRNewswire - August 29th, 2020
- New innovative report on Cloud Storage Gateway Market Future Growth Analysis, Business Demand and Opportunities to 2027 - The Scarlet - August 29th, 2020
- Global Cloud Based Storage Market 2020 Industry Outlook, Comprehensive Insights, Growth and Forecast 2026 - Good Night, Good Hockey - August 29th, 2020
- In quest to go paperless (and save money), Mizuho to start charging for bank books - Japan Today - August 29th, 2020
- NetApp posts strong Q1, plots big re-organisation Blocks and Files - Blocks and Files - August 29th, 2020
- The Handiest Video Doorbells to Remotely Test Who's At your Doorstep - Herald Planet - August 29th, 2020
- Explore the best free cloud backup services on the market - TechTarget - August 26th, 2020
- Integrated Media Technologies Joins the Active Archive Alliance - Sports Video Group - August 26th, 2020
- Storj Labs and FileZilla Collaborate to Offer Secure File Storage in the Remote Work Era - Database Trends and Applications - August 26th, 2020
- Cloud Compliance Frameworks: What You Need to Know - Security Boulevard - August 26th, 2020
- Reevert Unveils Advanced Tools to Enhance Network Security and Efficiency for Remote Workforces - PRNewswire - August 26th, 2020
- Enhancing Network Visibility for SD-WAN in the Era of Cloud and SaaS - The Fast Mode - August 26th, 2020
- Where to Back Up Your Smartphone Photos Online (and Why You Should) - Lifehacker - August 24th, 2020
- NordLocker encryption heads to the cloud - IT PRO - August 24th, 2020
- What Is the OneDrive File Size Limit? Microsoft's 2020 Updates - Cloudwards - August 24th, 2020
- A Security Flaw In 'Manage Versions' Feature Of Google Drive Could Allow Malware Attackers Trick Victims Into Installing Rogue Code - Digital... - August 24th, 2020
- Medical Image Cloud Market Expected to Witness High Growth over the Forecast Period 2020 2025 - The Daily Chronicle - August 24th, 2020
- What Is OneDrive? A 2020 Guide to Microsoft's Cloud Storage - Cloudwards - August 20th, 2020
- Stand Alone Cloud Storage Market Growth, Industry Verticals and Forecast to 2026 - Scientect - August 20th, 2020
- Outlook on the Healthcare Data Storage Global Market to 2026 - Opportunity Analysis for New Entrants - ResearchAndMarkets.com - Business Wire - August 20th, 2020
- Personal Cloud Storage Market by Top Manufacturers with Production, Price, Revenue (value) and Market Share to 2026 - The Daily Chronicle - August 16th, 2020
- Pure Storage and Cohesity in Partnership to Deliver Rapid Recovery at Scale - insideHPC - August 16th, 2020
- Cloud Storage Systems Market Analysis, Size, Regional Outlook, Competitive Strategies and Forecasts to 2025 - eRealty Express - August 16th, 2020
- Cloud Storage Market Size by Top Companies, Regions, Types and Application, End Users and Forecast to 2027 - Bulletin Line - August 16th, 2020
- How to install the Seafile cloud storage solution on Ubuntu Server 20.04 - TechRepublic - July 31st, 2020
- Five on-premise and cloud options for network-attached storage - ComputerWeekly.com - July 31st, 2020
- Want to back up the worlds largest SSD? Use this 100TB cloud storage - TechRadar - July 31st, 2020
- 4 reasons why Tresorit is the best cloud storage service - Tech Advisor - July 31st, 2020
- Cloud Technologies Your Business Needs in 2020 - The Seeker - July 31st, 2020
- FBI Alerts to Rise in Targeted Netwalker Ransomware Attacks - HealthITSecurity.com - July 31st, 2020
- The entire Netflix movie archive will fit on this 90PB storage system - TechRadar - July 31st, 2020
- Student discounts: the best offers in 2020 - Creative Bloq - July 31st, 2020