BTC Insight » Security http://blog.btclogic.com The BTC Logic Team Blog Mon, 02 Aug 2010 18:27:15 +0000 en hourly 1 http://wordpress.org/?v=3.0.1 Cloud SLA Standards http://blog.btclogic.com/cloud-sla-standards/ http://blog.btclogic.com/cloud-sla-standards/#comments Thu, 12 Nov 2009 13:37:10 +0000 Charlton http://blog.btclogic.com/?p=27 SLAs and security go together; each is meaningless without the other. As the cloud computing market matures, vendors will differentiate themselves by the security features (and other SLA details) they provide. The spectacular failure of Sidekick/Microsoft-Danger; Amazon and Google’s outages; and the shrug-and-grin policy of Yahoo! are all examples of cloud FAILs due to weak or non-existent SLAs. Referencing existing (i.e., pre-cloud and non-cloud) standards for security, auditability, data retention and destruction, reliability, availability, etc., is an unambiguous way of specifying exactly what the vendor will provide and exactly what the consumer can expect.

If you are a provider or consumer, what standards would we want in the SLAs? Here are [...]]]> http://blog.btclogic.com/cloud-sla-standards/feed/ 0 CIA endorses Private Cloud Computing http://blog.btclogic.com/cia-endorses-private-cloud-computing/ http://blog.btclogic.com/cia-endorses-private-cloud-computing/#comments Thu, 08 Oct 2009 14:47:48 +0000 Charlton http://blog.btclogic.com/?p=41 http://www.computerworld.com/s/article/9139016/CIA_endorses_cloud_computing_but_only_internally

One of the U.S. government’s strongest advocates of cloud computing is also one of its most secretive operations: the Central Intelligence Agency. The CIA has adopted cloud computing in a big way, and the agency believes that the cloud approach makes IT environments more flexible and secure.

Jill Tummler Singer, the CIA’s deputy CIO, said that she sees enormous benefits to a cloud approach. And while the CIA has been moving steadily to build a cloud-friendly infrastructure — it has adopted virtualization, among other things — cloud computing is still a relatively new idea among federal agencies.

“Cloud computing as a term [...]]]> http://blog.btclogic.com/cia-endorses-private-cloud-computing/feed/ 0 Cloud Security Issues – and SLAs – get real http://blog.btclogic.com/cloud-security-issues-and-slas-get-real/ http://blog.btclogic.com/cloud-security-issues-and-slas-get-real/#comments Thu, 08 Oct 2009 14:34:14 +0000 Charlton http://blog.btclogic.com/?p=36 http://www.theregister.co.uk/2009/10/05/amazon_bitbucket_outage/

DDoS attack rains down on Amazon cloud Code haven tumbles from sky

“Updated Web-based code hosting service Bitbucket experienced more than 19 hours of downtime over the weekend after an apparent DDoS attack on the sky-high compute infrastructure it rents from Amazon.com.

This in turn left many developers without access to code projects hosted on Bitbucket, a GitHub-like service based on the Mercurial version control system.

“Looks like all (my and a large number of fellow nerds) bitbucket projects have evaporated in a temporary, cloudy way. This is a major pissoff,” said one Reg reader and Bitbucket user, as others vented via Twitter.

But on another level, the news is sure to fuel [...]]]> http://blog.btclogic.com/cloud-security-issues-and-slas-get-real/feed/ 0