¿Qué es la seguridad en la nube?

Cloud security refers to the measures that organizations take as they integrate the public cloud more into their business operations. At a rudimentary level, cloud security is concerned with securing data both in transit across networks and while stored in data centers, then, further securing access controls to that data.

Hackers sometimes deploy sophisticated cybersecurity attacks to gain access to high-value targets that can be worth millions.

• DoS or DDoS Attack — Characteristically a brute force assault, Denial of Service (DoS) attacks aim at reducing or crippling the servers and services under attack, while Distributed Denial of Service (DDoS) attack uses multiple computers at the same time to each launch DoS attacks against a target or set of targets for a multiplier effect. These attacks are perpetrated for several reasons, the least of which is to cause annoyance. More resolute hackers have found that DoS attacks can open up opportunities to penetrate the target in other ways, gaining access to sensitive, valued data. When they’re large enough, these kinds of attacks can have dramatic financial and political ramifications. DoS attacks are brute force strategies requiring resources to sustain until the system under attack collapses.
• Man-in-the-Middle (MitM) Attack — Man-in-the-Middle attacks are sly methods by hackers to step in-between client and server communications and obtain controls reserved for trusted entities. Hackers can use session hijacking to obtain a client’s IP address after it has initiated a session with a server (the hacker had previously infiltrated the client via malware or other methods), and then quickly assume the client IP and controls, and then simply discarding the client, ultimately gaining access to the server. IP spoofing also attempts to gain access—instead of infiltrating a client, the hacker simply sends an access request with a fake IP address in hopes that it will be granted. Another similar method is replay attacks, a hacker will attempt to impersonate a trusted system by sending older, intercepted messages. MitM attacks are sophisticated, and require the use of multiple technologies to triangulate vulnerabilities.
• Phishing Attack — Phishing attacks are attempts on users rather than systems by impersonating trusted sources to coax sensitive information out of a person. A common method is email impersonation—a hacker will send a legitimate-looking email asking to follow a link to a seemingly reputable website, and in the process capture sensitive information or load malware. Hackers won’t stop there if the data to be captured is valuable enough. Even more, targeted is spear phishing, where hackers perform due diligence on their mark to create a stronger illusion of credibility. The target may receive emails with doctored headers that look real and be presented with fully functional websites that represent reputable brands. Phishing attacks rely on social psychology and technology, making them very sophisticated and difficult to automate.
• Malware Attack — Malware, or malicious software, is software, non-consentingly installed on computer systems, that perform malicious tasks by stealing data, replicating, propagating, hiding, lurking, or destroying files. Malware encompasses many feared agents: Trojans, Worms, Macro Viruses, File Infectors, Boot Record Infectors, Polymorphic Viruses, Stealth Viruses, Logic Bombs, Droppers, and Ransomware. In combination with other attacks, malware is used to steal passwords, data, and wreak havoc on systems, some of the most notorious malwares have been very small in size belying their impact, like the Sasser worm, only 15.8 KB, causing an estimated $18.1 billion in damages.

Cloud security architectures are the designs and blueprints of how an organization will implement and manage its cloud security.

• Data Security — Data security addresses security measures that protect data traversing a network, and when that data comes to rest in storage. Several controls can be deployed in security data, including encryption, public key infrastructure, deployment of encryption and tunneling protocols, use of block and streaming ciphers, and using granular storage resource controls.
• Network Security — While data can be encrypted before transit, network security is concerned with controls on the pathways between systems. Companies can deploy several network/security controls to further protect their systems, including network segmentation, firewalls, DDoS protection, packet capture, intrusion prevention/detection systems (IPS/IDS), packet brokers, network access controls (NAC), and APIs.
• Endpoint Protection — Endpoints provide logical places for security measures, like bouncers at clubs. These measures include host-based firewalls screen received data (standard firewalls are usually Internet, perimeter defenses), antivirus/anti-malware software, endpoint detection and response (EDR) systems provide real-time awareness, use of data loss and prevention (DLP) systems to enforce data flows, harden systems, blacklist and whitelist applications.
• Access Control — Access controls ensure those privileges are granted only to those who need them. Poor access control management can lead to difficulty to prevent threat opportunities. Consider these measures: identification, authentication, and authorization systems; multi-factor authentication, or single sign-on (SSO).

The landscape that cloud deployments operate in is accelerating in complexity as innovative technologies vie for resources. Technologies like the Internet of Things are adding millions of new devices, and more companies are moving their IT support to the cloud. Given this backdrop, companies are challenged to manage this complexity and gain greater visibility and insights into their cloud networks.

Manage Intensifying Cloud Complexity

Cloud deployments cannot be secured the same way that on-premises infrastructures are. Creating cohesive security must grapple with the fact that in the cloud data exposure is the norm, and that it should be assumed that someone is always listening. Coupled with a thorough security risk assessment, one that highlights how company data will flow across systems, cloud complexity can be mitigated.

Gain Greater Cloud Network Visibility

Network visibility is more challenging today because of virtualization, and distributed system complexities. Data centers can be in different geographic locations, and data can traverse multiple fabrics, all complicating how networking data is retrieved and analyzed. Today, sophisticated network monitoring platforms can replace the myriad of networking tools that companies use to produce visual analytics of their networks.