Story image

Cloud misconceptions aplenty in 2018 – Here’s a rundown

23 Mar 2018

Given cloud’s meteoric rise into mainstream it’s no surprise that there are a few misunderstandings surrounding its ins and outs.

Barracuda Networks public cloud EMEA director Chris Hill says these days most organisations regardless of size use it to a certain extent. Despite this, misconceptions remain about the technology – particularly on security.

To garner some deeper insights into the situation, Barracuda conducted global research in February 2018. As part of this, 164 respondents in EMEA were asked about their experiences and attitudes when it comes to security in the cloud. Some of the main findings included:

People still believe on-premises security is better than cloud

57 percent of respondents stated their on-premises security as superior to cloud.

“However, using security tools specifically designed for the public cloud can actually make a business more secure than they were when they operated purely on-premises,” says Hill.

“What was promising was that the shared security model was largely well known by respondents, with 71 percent expecting cloud security to be a responsibility that’s shared with cloud vendors. Just 19 percent think cloud vendors are solely responsible.”

The cloud is redefining the role of the firewall

The vast majority (82 percent) have concerns about deploying firewalls in the cloud, with 41 percent citing ‘pricing and licensing not appropriate for the cloud’, and 39 percent naming ‘no centralised management creating a significant overhead’ as their top two concerns.

“Other concerns included next generation firewalls simply not being practical for cloud environments and the lack of integration with native security tolls from cloud vendors,” says Hill.

“Interestingly, organisations seem to find value in cloud-specific security features, with 95 percent saying cloud-specific firewall capabilities would help them. 71 percent cite the most beneficial quality as ‘integration with cloud management, monitoring, and automation capabilities,’ and 59 percent cite being ‘easy to deploy and configure by cloud developers’ as the second most beneficial capability.”

Traditional security remains a bottleneck for DevOps

58 percent have adopted DevOps, DevSecOps, continuous integration and continuous deployment (CI/CD) methodologies. In terms of regions, EMEA was slightly in front of the US on 53 percent and behind APAC with 63 percent.

“Of the organisations that have adopted, 95 percent have faced challenges integrating security into those practices,” says Hill.

“The top challenge reported was ‘limitations with existing security solutions’. Security processes not being changed was also voted as a high scorer.”

Moving forward

Hill says the technology has evolved and now it’s our turn.

“We’re continuing to see questions and concerns around how organisations should be approaching security along with their cloud deployments, especially from larger companies. There still seems to be a lack of understanding in cloud security, and a misplaced belief that on-premises security is a lot stronger,” says Hill.

“One thing is for sure: as the move to cloud only increases in pace, for organisations that are used to operating under traditional data centre architecture, moving to the cloud will require a new way of thinking when they approach security.”

GitHub launches fund to sponsor open source developers
In addition to GitHub Sponsors, GitHub is launching the GitHub Sponsors, GitHub will match all contributions up to $5,000 during a developer’s first year in GitHub Sponsors.
Check Point announces integration with Microsoft Azure
The integration of Check Point’s advanced policy enforcement capabilities with Microsoft AIP’s file classification and protection features enables enterprises to keep their business data and IP secure, irrespective of how it is shared. 
ESET researchers break down latest arsenal of the infamous Sednit group
At the end of August 2018, the Sednit group launched a spear-phishing email campaign, in which it distributed shortened URLs that delivered first-stage Zebrocy components.
Container survey shows adoption accelerating while security concerns remain top of mind
The report features insights from over 500 IT professionals.
Google 'will do better' after G Suite passwords exposed since 2005
Fourteen years is a long time for sensitive information like usernames and passwords to be sitting ducks, unencrypted and at risk of theft and corruption.
Hackbusters! Reviewing 90 days of cybersecurity incident response cases
While there are occasionally very advanced new threats, these are massively outnumbered by common-or-garden email fraud, ransomware attacks and well-worn old exploits.
SEGA turns to Palo Alto Networks for cybersecurity protection
When one of the world’s largest video game pioneers wanted to strengthen its IT defences against cyber threats, it started with firewalls and real-time threat intelligence from Palo Alto Networks.
Forrester names Trend Micro Leader in email security
TrendMicro earned the highest score for technology leadership, deployment options and cloud integration.