Be careful while reposing your trust in cloud computing

Among the most talked about and hyped IT concepts in the recent past is cloud computing. Also termed software as a service (Saas), cloud computing is all about running software over the Internet and accessing it via a browser. A prime example of this is the salesforce.com customer management software. So is Google Docs!
Cloud computing, in a way, is the modern version of the 1960s timesharing model that diminished owing to the rise of the personal computer. The old model arose since computers were very expensive and tough to maintain. Modern computers and networks are cheaper, and relatively easier to maintain.

Cloud computing may indeed stand for the future of computing, as many believe. However, you still need to be cautious about who is looking after your data. You need to be concerned about the security aspect? IT security is more about trust. In the end, users have no choice but to trust the security of the IT service providers they access. Saas looks to move the trust boundary out a step further – you now have to trust your software service vendors as well.

You can protect a computer within your network with other security systems like firewalls and IDSs. You can construct a resilient system, which works even if those vendors may not be absolutely trustworthy. On the other hand, with any outsourcing model, including cloud computing, you have to trust the outsourcer's security, reliability, availability, and business continuity.

There are two basic types of cloud computing customers. The first pays a nominal fee for the services – and makes use of them for free in exchange for ads: for example, Gmail and Facebook. They would have no leverage with their outsourcers. The second type of customer pays a considerable amount of money for the services: to MessageLabs, salesforce.com, managed network firms, and so on. They have more leverage.

So what is the advice to these customers? Bruce Schneier, BT's chief security technology officer, notes in an article: “Be careful who you trust, be careful what you trust them with, and be careful how much you trust them. Outsourcing is the future of computing. Eventually we'll get this right, but you don't want to be a casualty along the way.”