|
Information Security in the Clouds
November 2010
Donald Faatz, The MITRE Corporation
Lawrence Pizette, The MITRE Corporation
ABSTRACT
Deploying data and applications to a cloud computing environment, whether private, community, or public, changes an organization's information technology (IT) security posture. Private cloud environments utilize new software layers, such as virtualization technologies, within the IT infrastructure. While community and public offerings may employ similar technologies, the security implications of community and public clouds are more complex. Use of these offerings changes the risk profile because some security responsibility is transferred to the cloud provider, and the organization’s security
perimeter is extended to include the provider's computing resources and personnel. Given these changes, organizations need to understand the risks and appropriate mitigations.
Additional Search Keywords
n/a
|
