RSA keynote: Lack of security in the cloud breeds distrust



Email    print   
March 5, 2010 —  (Page 1 of 2)
With a focus on what is not working, the annual RSA Conference was rife with ideas, but few solutions. Keynote speakers at the event claimed that vendors have over-hyped the cloud, and that developers and operators need to focus on securing their services, while vendors and providers need to figure out the security of clouds before businesses can really move there.

The RSA Conference, which took place earlier this week in San Francisco, kicked off with an overflowing session on security in the cloud. It was a potent metaphor for the conference's focus on services and trust.

Phillip Dunkelberger, CEO of data encryption company PGP, said in his keynote address that security in the cloud needs to be similar to the security used on mainframes in the 1960s and 1970s, such as having users share a system and keeping them out of each other's sensitive information through access controls.

He recommended reading the best practices produced by the Cloud Security Alliance, which were released last April.

Dunkelberger added that vendors have over-hyped the cloud and have yet to solve the fundamental security problems therein. The most notable missing piece, he said, is a solution for federated trust within the cloud. He then told the audience that moving to the cloud was akin to leaping off of a cliff for most businesses.

Tough on cybercrime
For enterprises, the focus was on securing services. Al Zollar, general manager of Tivoli at IBM, advocated proven development processes as a solution to services security woes.

“In all cases, we have to be ahead of the bad guys. We have to design security into the services," he said.

"Vulnerabilities arise from people refusing to follow proven, repeatable design processes. We're doing this with the thought in mind that with strong business security will come strong prosperity."

Zollar later announced the founding of the IBM Institute for Advanced Security, which will collaborate with academic institutions to further the state of cybersecurity.

FBI director Robert Mueller used his keynote on the final day of the conference to ask businesses to work together with the FBI to identify cybercrime. He specifically called upon businesspeople at the show to ask them to report systems breaches promptly rather than keep them a secret.



Related Search Term(s): cloud computing, security

Pages 1 2 


Share this link: http://sdt.bz/34175
 
Most Read Latest News Blog Resources

Add comment


Name*
Email*  
Country     


  • Comment
Loading




close
NEXT ARTICLE
Cloud computing is green computing
Despite advances made in efficient power consumption, cloud's scalability is the best way to cut down on energy use Read More...
 
 
 
 
News on Monday
more>>
SharePoint Tech Report
more>>


   

 
 

Download Current Issue
FEBRUARY 2012 PDF ISSUE

Need Back Issues?
DOWNLOAD HERE

Want to subscribe?


 
blogs tab
Are you at risk for burnout?
Burnout is a severe problem and it can strike at any time. Here's how to tell if you are nearing the edge.
02/09/2012 02:16 PM EST

Agility, mom, and apple pie
If we're to evaluate the state-of-the-art in software development, we should start with the values espoused in the Agile Manifesto.
02/07/2012 11:57 AM EST

RIM woos developers with free tablet
How do you get more apps ported to the BlackBerry PlayBook? By giving every developer a free tablet, of course!
02/04/2012 01:57 PM EST

GitHire: Use Headhunters to Find Your Perfect Programmer
Are you a hiring manager tired of scouring the job boards? Check out this new service that will find 5 people interested in your jobs.
02/03/2012 12:17 PM EST

Facebook claims hacker cred
Facebook's SEC S-1 filing form includes a short essay on the Hacker Way by Mark Zuckerberg himself.
02/02/2012 08:26 AM EST

Ryan Dahl steps down
Ryan Dahl, creator of Node.js, steps back from his position as gatekeeper for the project.
02/01/2012 04:58 PM EST

 
Events calendar tab
2/13/2012 to 2/16/2012
Santa Clara
TechWeb

2/26/2012 to 2/29/2012
San Francisco
BZ Media

2/27/2012 to 3/2/2012
San Francisco
RSA

3/4/2012 to 3/7/2012
Las Vegas
IBM Tivoli

3/5/2012 to 3/9/2012
San Francisco
TechWeb