Americans have more reasons than ever to be concerned about their online security and privacy. Both the government and the big data aggregators, like Google and Facebook, have been in the headlines for breaking public trust. Stories about the NSA listening in to laptop mics, sending law enforcement to homes Googling pressure cookers, and the death of privacy on Facebook’s new graph search are largely exaggerated. However, there are some real privacy and security issues involved in storing data on the cloud.
Cloud services, like those provided by Amazon, Google and Apple, give users seamless access to their data on almost any device. The level of convenience and constant access to our music, video, pictures and documents is unparalleled. However, there are some security issues implicit in the cloud. Issues like ownership and control of data, application security, and privacy are all areas where customers should be making informed decisions about who they trust with their data.
Cloud services work in essentially the same way as the Internet. Information is stored on servers around the world and then are remotely accessed. Once an image or document is uploaded to a remote server for storage – whether that is a data backup service or Facebook – the owner has lost control and, in some cases, ownership of that data.
While people don’t really look at it this way, Facebook is a cloud service for connecting you with friends. When you upload a photo to Facebook, you are trusting their handling of that data. Control and ownership policies vary greatly from service to service and should be read carefully.
It is important to remember that cloud providers are vulnerable to the same security issues as any website. You might remember the LinkedIn hack a few years ago that compromised millions of user accounts. Imagine the implication of a service like DropBox having its customer database stolen and the vulnerability of those users’ data. Be careful of what information is stored on cloud solutions and choose service providers carefully.
If you are using cloud services for business purposes, your choice of cloud provider is even more critical. Basic issues like disaster recovery and service downtime can cost businesses thousands of dollars in lost revenue and productivity. Trust is critical as well. Managers must be confident that a switch in service providers will mean speedy and diligent deletion of files from old servers.
There are steps users can take to minimize their risk when taking advantage of cloud technology.
First, consider the information above and think critically about what information is stored on the cloud.
Social security numbers and banking information, for instance, should be treated with the same diligence as paper copies.
Second, know that all cloud providers are not created equal.
A provider should have a comprehensive privacy and security policy. A comprehensive and favorable service level agreement should explicitly outline ownership of documents, access to data, and encryption methods. Absolute transparency in this contract is important. Look for vague terms in regards to data recovery, confidentiality, and data integrity and avoid any provider whose service agreement you are not comfortable with. For business owners, contracts should always allow audits and certification by third parties.
Finally, make sure that terms include the option to terminate your agreement in the case of a security breach and penalties for missed recovery times.
These simple details hold the company to a different level of integrity in their operations.
As network attached storage devices become more prevalent in the home, personal clouds are also a growing option. Like any solution, there are pros and cons to this option. Currently, a personal cloud setup requires some advanced knowledge. However, there are products currently in development that will make personal cloud computing more accessible in the future. Look for these devices in the coming years, as cloud computing and security continue to grow.
[break]
William Haynes, founder and CEO of Sabai Technology, is a lifelong networking geek and hobbyist. While living in Thailand for three years with his family, Haynes learned to modify consumer routers for advanced networking. He used these skills to extend high-speed Internet to fellow expats in Thailand, and used the concept to create Sabai Technology shortly after his return to the States. Sabai Technology is currently sponsoring an open-source router project that will bring personal clouds and more to everyday users. You can learn more at SabaiTechnology.com or JaiRoProject.com.
