__Cloud Storage Security: A Practical Guide__ introduces and discusses the risks associated with cloud-based data storage from a security and privacy perspective. Gain an in-depth understanding of the risks and benefits of cloud storage illustrated using a Use-Case methodology. The authors also provide a checklist that enables the user, as well as the enterprise practitioner to evaluate what security and privacy issues need to be considered when using the cloud to store personal and sensitive information.* Describes the history and the evolving nature of cloud storage and security * Explores the threats to privacy and security when using free social media applications that use cloud storage * Covers legal issues and laws that govern privacy, compliance, and legal responsibility for enterprise users * Provides guidelines and a security checklist for selecting a cloud-storage service provider * Includes case studies and best practices for securing data in the cloud * Discusses the future of cloud computing Front Cover......Page 1 Cloud Storage Security......Page 4 Copyright Page......Page 5 Contents......Page 6 1.1.1 Definitions......Page 8 1.1.2 History......Page 9 1.2 Privacy and Security Concepts and Issues......Page 10 1.2.1 Your Data Versus Other People’s Data......Page 14 1.2.2 Getting Your Data In and Out of the Cloud......Page 17 1.2.3.1 Legal Threats......Page 19 1.2.3.2 Criminal Threats......Page 21 1.3.1 What Is It?......Page 22 1.3.2 Case Studies: Comparison of Cloud Storage Security......Page 23 1.4 Cloud-Based Data Sharing......Page 26 References......Page 28 2 Application Data in the Cloud......Page 30 2.1.1 Email......Page 31 2.1.2 Background......Page 32 2.1.3.2 Security Concepts......Page 34 2.1.3.5 Data-in-Motion......Page 35 2.1.3.8 Information Collected by Email Service Providers......Page 36 2.1.3.10 How Email Service Providers Use the Information......Page 38 2.1.3.12 From Google’s Terms of Service......Page 39 2.1.3.14 From Yahoo! Privacy Policy......Page 40 2.2.1 Background......Page 41 2.2.2.2 Security Concepts......Page 42 2.2.2.6 Data-at-Rest......Page 43 2.2.2.7 Facility Security......Page 44 2.2.2.10 Encryption......Page 45 2.3.1 Social Media as Cloud Storage......Page 47 2.3.2.2 Security Concepts......Page 48 2.3.2.4 Twitter......Page 49 2.3.2.5 Twitter Privacy Policy......Page 50 2.3.2.6 Facebook......Page 51 2.3.2.7 How Facebook Uses Data They Collect......Page 54 2.4.1 Background......Page 55 2.4.2.3 Google Docs......Page 56 2.4.2.6 Privacy......Page 57 2.5.1 Background......Page 58 2.5.2.3 Efficacy and Oversight......Page 59 2.5.2.4 Privacy and Security......Page 60 References......Page 61 3 Privacy Challenges......Page 64 3.1 Who Wants Your Data?......Page 65 3.2 Privacy and Security Incidents in the News......Page 69 3.3 Legal Issues......Page 70 3.3.2 Location, Location, Location......Page 71 3.3.3 Employers and Insurance Companies......Page 72 3.3.5 Law Enforcement......Page 73 3.3.6 Lifestyle and Psychological Profiling......Page 74 3.4.2 Authoritarian Governments......Page 75 3.4.3 Friends......Page 76 References......Page 78 4.1 Legal Responsibility When Handling Other People’s Data......Page 82 4.2.1 HIPAA......Page 84 4.2.1.2 Administrative Safeguards......Page 87 4.2.1.3 Technical Safeguards......Page 88 4.2.2 Dodd-Frank......Page 90 4.2.3 Gramm–Leach–Bliley Act......Page 92 4.2.4 SOX......Page 94 4.3 Cloud Storage Provider and Compliance......Page 95 4.4 Laws and Regulations of Other Countries......Page 96 4.4.1.1 Benefits for EU Citizens......Page 97 4.4.1.2 Benefits for Business......Page 98 4.4.2.1 Data Protection Principles......Page 100 4.4.2.2 Regulation and Enforcement......Page 101 4.4.3 India – Information Technology Act 2000 (IT Act)......Page 102 4.4.3.2 Privacy Policy Compliance......Page 103 4.5 Summary......Page 104 References......Page 105 5.1 Two-factor Authentication......Page 106 5.2 Encrypt Yourself......Page 108 5.3 Secure Email for Cloud Storage......Page 109 5.4 Passwords and Encryption Keys......Page 110 5.6 Delete Private Data......Page 112 5.7 Personal or Distributed Cloud Storage......Page 113 5.8 Security-as-a-Service......Page 117 5.9 Summary......Page 118 References......Page 119 6.1.1 Cloud Provider’s Physical Security......Page 120 6.1.3 Encryption/Decryption......Page 121 6.1.4 Authentication and Access Control......Page 122 6.2.1 Evaluating Data and User Access......Page 123 6.3 Cloud Data Privacy and Security Checklist......Page 125 6.3.4 Cloud Provider Network Security......Page 126 6.3.8 File Content Deletion......Page 127 6.3.12 Passwords......Page 128 6.3.15 Other Things to Consider When Storing Data in the Cloud......Page 129 Reference......Page 130 7.1.1 Encryption by Default......Page 132 7.1.4 Anonymity Networks......Page 133 7.1.6 Home Clouds......Page 134 7.1.7 Security Versus Safety......Page 135 7.2.1 Cloud of Things......Page 136 7.2.2 Future Data Storage......Page 138 7.2.3 Quantum Memory......Page 139 7.2.4 The Future of Storage Technology – DNA......Page 140 7.2.5 Biology to Computer Science......Page 142 7.2.6 DNA Storage and Security......Page 143 7.2.7 The Cloud – Data, Information, Questions......Page 144 References......Page 145
Cloud Storage Security: A Practical Guide introduces and discusses the risks associated with cloud-based data storage from a security and privacy perspective.
The book covers such topics as cloud storage and security from a historical perspective, use cases and applications in the cloud, how safe is data in the cloud, compliance issues for enterprises, privacy tools, and "Best Practices" for securing data in the cloud.
- Discusses the evolving nature of cloud security
- Describes privacy and security threats
- Covers cloud storage compliance and provide issues as well as legal responsibility
- Provides guidelines for selecting a cloud storage provider and service
- Includes case studies and best practices for securing data in the cloud
