securitybananas.com

The European Network and Information Security Agency) released their 124 page report on Cloud Computing Security Risk Assessment.

It’s a great project; I will dig into this document this week.

You can download the document here

Introducing the “Cloud For Clunkers Program”

Cloud providers are advertising the equivalent of the U.S. Government’s “Cash for Clunkers” program:

“You give up your tired, inefficient, polluting, hard to maintain and costly data centers and we’ll give you PFM in the form of a global, seamless, elastic computing capability for less money and with free undercoating.  The value proposition is fantastic: cost-savings, agility, the illusion of infinite scale, flexibility, reliability, and “green.”

Another great Blog post of Chris Hof, read the full story on:

http://www.rationalsurvivability.com/blog/?p=1240

Cloud computing was not designed for security, although organizations such as Cloud Security Alliance (CSA) and Open Web Application Security Project (OWASP) are making great strides in helping the industry solve the myriad security problems confronting cloud computing. The benchmark guidelines established by the CSA in the document, Guidance for Critical Areas of Focus in Cloud Computing, is a great first step. This article is intended to pick up where the CSA guide left off in terms of defining what a distributed web application firewall (dWAF) should look like in order to meet the standards set within the CSA document.

Read the full story on:

http://www.net-security.org/article.php?id=1270

A great blog and posting of CHris Hof:

http://www.rationalsurvivability.com/blog/?p=1127&cpage=1