{"id":30971,"date":"2018-02-07T16:13:39","date_gmt":"2018-02-07T08:13:39","guid":{"rendered":"http:\/\/www.upgrademag.com\/web\/?p=30971"},"modified":"2018-02-07T16:13:39","modified_gmt":"2018-02-07T08:13:39","slug":"opinion-challenges-and-mitigation-strategies-for-security-in-multi-cloud","status":"publish","type":"post","link":"http:\/\/www.upgrademag.com\/web\/2018\/02\/07\/opinion-challenges-and-mitigation-strategies-for-security-in-multi-cloud\/","title":{"rendered":"OPINION | Challenges and mitigation strategies for security in multi-cloud"},"content":{"rendered":"

By Robin Schmitt
\nGeneral Manager for APAC, Neustar<\/u><\/u><\/b><\/p>\n

The unprecedented growth of the cloud computing industry has had the business community rejoice. T<\/span>he\u00a0discussion<\/span>\u00a0among the business and IT leaders is no longer\u00a0concerning \u2018<\/span>Should we move to the cloud?\u2019\u00a0<\/span>but\u00a0\u2018<\/span>How do we optimize our cloud migration strategy?\u2019\u00a0<\/span>Taking advantage of the competitive cloud market, enterprises\u00a0have gradually abandoned<\/span>\u00a0all-in-one solution suites and begun opting for best-of-breed offerings. Exclusivity is a story of the past; enterprises now work with\u00a0multiple\u00a0<\/span>vendors to meet their cloud computing needs, giving rise to the\u00a0<\/span>strategy known as multi-cloud.<\/strong><\/u><\/u><\/p>\n

\"\"<\/a>

IMAGE FROM PIXABAY.COM<\/p><\/div>\n

There is no denying the\u00a0increasing<\/span>\u00a0popularity of multi-cloud. According to a\u00a0study<\/a>\u00a0<\/span>by Microsoft and 451 Research, nearly a third of organizations work with three to four cloud vendors. While different departments within a company happily turn to their vendor-of-choice\u00a0for solutions\u00a0<\/span>to\u00a0their\u00a0<\/span>particular needs, multi-cloud management can appear a challenging task for CIOs, especially when it comes to security.<\/u><\/u><\/u>\u00a0<\/u><\/span><\/p>\n

What is multi-cloud?<\/b><\/u><\/u><\/b><\/p>\n

Multi-cloud, a strategy when companies deploy cloud services from two or more vendors, is becoming a preferred choice for a host of reasons, most notably the flexibility to mix and match offerings. For instance, a company might rely on Amazon Web Services\u00a0<\/span>for computing capacity and Google for machine learning. Tapping into the resources of multiple vendors also grants enterprises more negotiating power and the flexibility to migrate their business operations based on shifting dynamics such as new offerings and pricing, resulting in enhancement of productivity and lower cost.<\/u><\/u><\/span><\/p>\n

However, some business leaders might consider multi-cloud as a strategy that will expose their organization to the cyberstorm that has been gathering strength recently. The 2017\u00a0Worldwide DDoS Attacks and Cyber Insights Research Report by Neustar<\/a><\/span>\u00a0revealed an 11 percent increase in the number of organizations targeted by DDoS attack. Despite having various forms of security measures in place, businesses still suffered from sluggish detection and response to malicious activities, with 33 percent of organizations in APAC reporting an average revenue loss of at least $250,000. Multi-cloud has proven to be a vital disaster prevention\/recovery strategy: enterprises can avoid outages by relying on failover architecture on unaffected clouds. However, securing a multi-cloud environment can be seen as highly problematic and challenging.<\/u><\/u><\/p>\n

DDoS in Multi-Cloud<\/span><\/b><\/u><\/u><\/b><\/p>\n

Multi-cloud is commonly considered the superior strategy when it comes to overcoming a wide variety of problems within an enterprise. Ideally, multi-cloud\u2019<\/span>s abilities as a problem-solver should offload some computing resources otherwise required\u00a0for business operations\u00a0<\/span>and lead to the simplification of the IT infrastructure. After all, profound benefits such as business continuity, flexibility and cost-savings are the main factors driving this trend of deployment. But with these payoffs come a few multi-cloud management headaches, particularly\u00a0with regard to securing\u00a0<\/span>a multi-cloud environment against DDoS attacks.<\/u><\/u><\/p>\n

As more organizational data floods to the cloud, businesses are increasingly relying on Application Programming Interfaces (APIs) to smoothen the process and optimize the use of all services available. In a cloud environment, however, APIs can be a fickle friend. On one hand, APIs enable users to access, interact with, and manage cloud resources, resulting the ease of integration, infrastructural expansion, or in the case of multi-cloud, cross-cloud compatibility. On the other hand, exposed APIs can leave enterprises vulnerable to breaches as they open the floodgate to DoS\/DDoS attacks. Consequently, poor management of multiple API networks on multiple clouds exponentially increases the risk of cyberattacks for businesses.\u00a0<\/u><\/u><\/span><\/p>\n

Multi-layered Security Approach<\/span><\/b><\/u><\/u><\/p>\n

With the relentless wave of DDoS attacks showing no sign of slowing down, it is<\/span>\u00a0clear that\u00a0organizations\u00a0<\/span>need a robust yet manageable network\u00a0security scheme<\/span>, with solutions that extend the protection of resources to\u00a0all cloud networks<\/span>\u00a0<\/span>to manage all potential risk factors.\u00a0Vital components of this security scheme include vulnerability testing, API assets consolidation and rigorous authentication mechanisms.\u00a0<\/u><\/u><\/span><\/p>\n

But ultimately, the only way to secure a multi-cloud environment is to apply a multi-layered security approach. Understandably, managing multiple cloud networks can strain in-house IT resources, prompting companies to seek external support from third-party security vendors. Dedicated cybersecurity partners with extensive knowledge of the underlying infrastructures of different cloud platforms can assist businesses in constantly monitoring and implementing sophisticated mitigation strategies. This allows innovative enterprises to continue to leverage on the latest computing technologies while seeking to remain vigilant and agile in an ever-shifting cyberthreat landscape.\u00a0<\/u><\/u><\/span><\/p>\n

Migrating\u00a0in-house business operations\u00a0<\/span>to the cloud is a vital step in helping businesses redefine their digital readiness. With just a few clicks,\u00a0<\/span>they\u00a0<\/span>can\u00a0<\/span>enjoy the flexibility and computing prowess powered by\u00a0vendors\u2019 superior<\/span>\u00a0computing infrastructure\u00a0while<\/span>\u00a0significantly reducing the expenditure that would otherwise be\u00a0spent on in-house IT\u00a0<\/span>resources.\u00a0However, as vibrant as the cloud computing market currently appears, enterprises need to be mindful that in some cases vendors might not have rigorous data security standards and sophisticated protection tools. For this reason, in addition to relying on the cloud vendors for security measures, enterprises must play an active role in monitoring their information resources, devise a layered security plan, and work with trusted cybersecurity partners to remain vigilant against future threats.\u00a0<\/u><\/u><\/span><\/p>\n

Robin Scmitt leads Neustar’s Australian operations, with a focus on driving growth within the Asia-Pacific region. Neustar is a trusted, neutral provider of real-time cloud-based information & analysis to the Internet, telecom, financial, media & advertising and retail industries. Robin joined the Neustar team in August 2015 and prior to this he served as Chief Operating Officer at Bombora Technologies for five years, before it was acquired by Neustar.<\/u><\/u><\/span><\/i><\/p>\n","protected":false},"excerpt":{"rendered":"

There is no denying the\u00a0increasing\u00a0popularity of multi-cloud. According to a\u00a0study\u00a0by Microsoft and 451 Research, nearly a third of organizations work with three to four cloud vendors. While different departments within a company happily turn to their vendor-of-choice\u00a0for solutions\u00a0to\u00a0their\u00a0particular needs, multi-cloud management can appear a challenging task for CIOs, especially when it comes to security.\u00a0<\/p>\n","protected":false},"author":7,"featured_media":29960,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[26],"tags":[107,148,5780],"class_list":["post-30971","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-opinions","tag-cloud","tag-cloud-computing","tag-neustar"],"_links":{"self":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/30971","targetHints":{"allow":["GET"]}}],"collection":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/users\/7"}],"replies":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/comments?post=30971"}],"version-history":[{"count":0,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/posts\/30971\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media\/29960"}],"wp:attachment":[{"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/media?parent=30971"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/categories?post=30971"},{"taxonomy":"post_tag","embeddable":true,"href":"http:\/\/www.upgrademag.com\/web\/wp-json\/wp\/v2\/tags?post=30971"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}