--- title: How Cloud Computing is introducing new risks, and how Companies can protect themselves better description: Businesses are faced with new risks associated with cloud computing. It is critical that their security strategy changes to keep pace with the evolving threats. image: http://www.cloudmask.com/hubfs/Mask_500.jpg --- [![CloudMask - Data protection under breach](https://www.cloudmask.com/hs-fs/hubfs/Horizontal-larger-text.png?width=223&height=40&name=Horizontal-larger-text.png "CloudMask - Data protection under breach")](https://www.cloudmask.com) - [For Business](https://www.cloudmask.com/business) - [For Enterprise](https://www.cloudmask.com/enterprise) - [For Developers](https://www.cloudmask.com/saas-developers) - Resources - [Blog](https://www.cloudmask.com/blog) - [Videos](https://www.cloudmask.com/videos) - [Help](http://help.cloudmask.com) # How Cloud Computing is introducing new risks, and how Companies can protect themselves better ![Mask 500](http://www.cloudmask.com/hs-fs/hubfs/Mask_500.jpg?width=500&name=Mask_500.jpg "Mask 500") Many people feel that Cloud computing has been around for quite a long time, and intrusion into such technology is far from innovative. To them, it appears that instead of storing data on their own servers in a server farm, they now store their data in much larger clusters of servers in someone’s data center. The Cloud's threats arise from the sheer scale of data that users store in the cloud and not due to any inherent weakness of the cloud technology itself. This changes the risk profile significantly and therefore it is critical that the security strategy of businesses should also change to keep pace with the evolving threats. The astronomical quantities of data being stored in the cloud are giving rise to new kinds of threats that did not exist previously. Two major issues are involved. First, the large concentration of data in a logically single location is creating an extremely high value ‘information target’. Typical examples of such data are datasets comprising Government Health Care records, eGovernance data, and datasets belonging to large businesses and banks and so on.  An attacker can obtain an enormous benefit by breaking into such a data repository. The second issue pertains to the fact that it is virtually impossible for a security administrator to know where his company data is physically located. A corollary of the above two situations is that new types of risks are being created. We have seen this in the increasing trend of governments using their power to target other governments and corporations. With the resources that modern governments command, their teams can mount sophisticated multifactor attacks that are beyond the expectation and understanding of *any* business, bank or enterprise. These entities simply do not have the skills and the resources to prevent such attacks. In addition, organized crime organizations mount similar attacks. The other issue is the increase of the very sophisticated “Stealth Cyber Attacks”. Attackers will take great pains to hide any evidence of the breach while they continue their attacks. The value of this type of attacks and the damage an attacker can cause increases exponentially with the time for which the attack stays undetected. Consequently, businesses facing well-designed attacks may never come to know of security breaches. Faced with these realities, any company that relies on traditional methods of securing data behind a firewall and database access controls will be in for a rude shock. No attacker will advertise his presence. In fact, the most successful attacks will never be discovered. What if you are the victim of such an attack right NOW? There is only one answer to this situation. When you are faced with a new threat, you must fight it with a new weapon. The approach to security can no longer follow a perimeter protection paradigm. You do not protect the perimeter; you protect the data. Take it as a given that the attacker will access your data. Remember the Heartbleed issue and for how long it had continued without users being aware that they were exposed? Take it as a given that the perimeter *will* be breached. We need to ensure that even after the attacker breaches your perimeter defenses (firewall, IDS etc.) he finds nothing of value to steal. Can anyone say how many Heartbleed attacks (or even more powerful ones) are underway *now*? No one can, but you can be sure that they are underway even as you read this. Can anyone say how much data is being stolen right now? No one can, but you can bet that data is being stolen from some company’s networks right now. With new data security solution in place, you can be sure that, *your* data is not at risk. You need to start with the assumption that the attacker will eventually be able to get access to your network or data. Working from that position, you ensure that *WHEN* the attacker / government / malicious insider do get access, your data is stored in a format that ensures that it is of no use to them.  Read [Mitigating the risk of data breaches with-tokenization](https://www.cloudmask.com/blog/mitigating-the-risk-of-data-breaches-with-tokenization) ![Protection Under Breach](https://www.cloudmask.com/hubfs/GIF_Animation/Gif%20Animation%20All.gif) *With CloudMask, only your authorized parties can decrypt and see your data. Not hackers with your valid password, Not Cloud Providers, Not Government Agencies, and Not even CloudMask can see your protected data. *[Twenty-six government cybersecurity ](https://www.commoncriteriaportal.org/)*agencies around the world* [back these claims.](https://www.cloudmask.com/hubfs/CloudMask_Aug2016/pdf/Common_Criteria_Cert.pdf?t=1486380970425) [![TRY IT NOW](https://no-cache.hubspot.com/cta/default/468512/82253abc-9465-4974-b5ea-2a46f934181b.png)](https://cta-redirect.hubspot.com/cta/redirect/468512/82253abc-9465-4974-b5ea-2a46f934181b) Watch our video and demo at [www.vimeo.com/cloudmask](http://www.vimeo.com/cloudmask)   Share this article: - [Tweet](https://twitter.com/share) ### Related posts [![The Myth of “Staying One Step Ahead of the Hackers”](https://www.cloudmask.com/hubfs/Hacker%20one%20step.png)](https://www.cloudmask.com/blog/the-myth-of-staying-one-step-ahead-of-the-hackers) [The Myth of “Staying One Step Ahead of the Hackers”](https://www.cloudmask.com/blog/the-myth-of-staying-one-step-ahead-of-the-hackers) March 08, 2018 [![Why the government isn't a fan of commercial encryption](https://www.cloudmask.com/hubfs/brafton_images/The-government-want-the-ability-to-conduct-surveillance--on-encrypted-communications_2135_40071057_0_14090523_500.jpg)](https://www.cloudmask.com/blog/why-the-government-isnt-a-fan-of-commercial-encryption) [Why the government isn't a fan of commercial encryption](https://www.cloudmask.com/blog/why-the-government-isnt-a-fan-of-commercial-encryption) November 16, 2017 [![If everybody could read your email, are you secure?](https://www.cloudmask.com/hubfs/brafton_images/-Despite-corporations-investing-heavily-in-data-protection-small-errors-can-have-big-consequences-and-a-lack-of-email-encryption-will-certainly-le.jpg)](https://www.cloudmask.com/blog/if-everybody-could-read-your-email-are-you-secure) [If everybody could read your email, are you secure?](https://www.cloudmask.com/blog/if-everybody-could-read-your-email-are-you-secure) August 14, 2017 [![Should You Encrypt Data Before it Goes to the Cloud?](https://www.cloudmask.com/hubfs/Encrypt%20in%20Cloud-1.jpg)](https://www.cloudmask.com/blog/should-you-encrypt-data-before-it-goes-to-the-cloud) [Should You Encrypt Data Before it Goes to the Cloud?](https://www.cloudmask.com/blog/should-you-encrypt-data-before-it-goes-to-the-cloud) June 14, 2017 [![Can Two-Factor Authentication Keep Your Company's Data Safe?](https://www.cloudmask.com/hubfs/2fa%20.png)](https://www.cloudmask.com/blog/can-two-factor-authentication-keep-your-companys-data-safe) [Can Two-Factor Authentication Keep Your Company's Data Safe?](https://www.cloudmask.com/blog/can-two-factor-authentication-keep-your-companys-data-safe) June 08, 2017 [![How to reduce the consequences of Data Breach](https://www.cloudmask.com/hubfs/Data%20Breach%20notification%20.jpg)](https://www.cloudmask.com/blog/data-anonymization-can-reduce-the-risks-from-data-breaches) [How to reduce the consequences of Data Breach](https://www.cloudmask.com/blog/data-anonymization-can-reduce-the-risks-from-data-breaches) April 28, 2017 Please enable JavaScript to view the <a href="http://disqus.com/?ref\_noscript">comments powered by Disqus.</a> ### Sign Up for our Newsletter to get the latest in everything cyber security. We care about your privacy, let us show you how. ### Recent Posts ### Posts by Topic - [Breach (29)](https://www.cloudmask.com/blog/topic/breach) - [Certifcation (3)](https://www.cloudmask.com/blog/topic/certifcation) - [cloud computing (7)](https://www.cloudmask.com/blog/topic/cloud-computing) - [Cloud threats (6)](https://www.cloudmask.com/blog/topic/cloud-threats) - [Common Criteria (2)](https://www.cloudmask.com/blog/topic/common-criteria) - [Compliance (18)](https://www.cloudmask.com/blog/topic/compliance) - [costs (1)](https://www.cloudmask.com/blog/topic/costs) - [cyber threats (22)](https://www.cloudmask.com/blog/topic/cyber-threats) - [Cybercrime (6)](https://www.cloudmask.com/blog/topic/cybercrime) - [data centric protection (1)](https://www.cloudmask.com/blog/topic/data-centric-protection) - [Data Masking (25)](https://www.cloudmask.com/blog/topic/data-masking) - [data privacy (28)](https://www.cloudmask.com/blog/topic/data-privacy) - [data residency (4)](https://www.cloudmask.com/blog/topic/data-residency) - [data security (9)](https://www.cloudmask.com/blog/topic/data-security) - [Data Sovereignty (8)](https://www.cloudmask.com/blog/topic/data-sovereignty) - [defense in depth (1)](https://www.cloudmask.com/blog/topic/defense-in-depth) - [Email Security (5)](https://www.cloudmask.com/blog/topic/email-security) - [encryption (8)](https://www.cloudmask.com/blog/topic/encryption) - [financial (1)](https://www.cloudmask.com/blog/topic/financial) - [Google (5)](https://www.cloudmask.com/blog/topic/google) - [governance (3)](https://www.cloudmask.com/blog/topic/governance) - [Government surveillance (13)](https://www.cloudmask.com/blog/topic/government-surveillance) - [hacking (1)](https://www.cloudmask.com/blog/topic/hacking) - [Healthcare (2)](https://www.cloudmask.com/blog/topic/healthcare) - [insider threats (3)](https://www.cloudmask.com/blog/topic/insider-threats) - [Legal (6)](https://www.cloudmask.com/blog/topic/legal) - [New Security Paradigm (6)](https://www.cloudmask.com/blog/topic/new-security-paradigm) - [Password (4)](https://www.cloudmask.com/blog/topic/password) - [Personal Data Protection (17)](https://www.cloudmask.com/blog/topic/personal-data-protection) - [PKI (1)](https://www.cloudmask.com/blog/topic/pki) - [Regulation (1)](https://www.cloudmask.com/blog/topic/regulation) - [RSA2017 (1)](https://www.cloudmask.com/blog/topic/rsa2017) - [Shadow it (1)](https://www.cloudmask.com/blog/topic/shadow-it) - [Tokenization (3)](https://www.cloudmask.com/blog/topic/tokenization) - [User Privacy (10)](https://www.cloudmask.com/blog/topic/user-privacy) see all - [About Us](https://www.cloudmask.com/about) - [Pricing & Plans](https://www.cloudmask.com/subscription-plans/) - [Partners](https://www.cloudmask.com/about/cloud-partners/) - [Get in touch with us](https://www.cloudmask.com/contact-us) **CloudMask Inc.** +[1 (819) 282-1501](tel:1%20(819)%20282-1501)[+1 (866) 202-4443](tel:1-866-202-4443) - What We Protect - [For Business Users](https://www.cloudmask.com/business) - [For Enterprise](https://www.cloudmask.com/enterprise) - [For Developers](https://www.cloudmask.com/saas-developers) - Who We Help - [Legal](https://www.cloudmask.com/e2ee-for-legal-sector) - [Financial](https://www.cloudmask.com/e2ee-for-financial) - [Healthcare](https://www.cloudmask.com/e2ee-for-healthcare) - [Education](https://www.cloudmask.com/e2ee-for-education) - Resources - [Help & Support](http://help.cloudmask.com) - [Blogs](https://www.cloudmask.com/blog) - [News](https://www.cloudmask.com/news) - [Videos](https://www.cloudmask.com/videos) [![Cloudmask](https://www.cloudmask.com/hs-fs/hubfs/CloudMask_Aug2016/CM-Logo-200-50.png?width=200&height=50&name=CM-Logo-200-50.png "Cloudmask")](https://www.cloudmask.com/) © 2012-2017 CloudMask All Rights Reserved