Securing the Cloud: Data Security

The security concerns of storing data in the cloud are not unique compared to the concerns of storing data within an organization. However, this does not mean that the risks to data are the same in these two very different environments. Cloud data security involves more than data encryption. Requirements for data security vary depending on the service model (Software-as-a-Service, Platform-as-a-Service, and Infrastructure-as-a-Service), the deployment model (private through public), and the user's tolerance for risk. Meeting the requirements for cloud data security, therefore, entails applying existing security techniques and following sound security practices. This chapter examines data security in cloud computing. Readers will learn how to identify what data and applications they will store in a non-private and non-high-assurance cloud, how to avoid cloud data lock-in , options for protecting sensitive or valuable data, and how to choose a cloud service provider.