• Home
  • About
  • Privacy
  • Contact
  • DCMA
  • Terms
  • Submit / Write For Us
Tuesday, January 31, 2023
Android Buzz
  • News
  • Phones
  • Apps
  • Games
  • Reviews
  • Tech
    Bollywood's Top Iconic Indian Destinations

    Bollywood’s Top Iconic Indian Destinations

    Qualcomm announces Snapdragon AR2, S5 and S3 Gen 2 platforms

    Qualcomm announces Snapdragon AR2, S5 and S3 Gen 2 platforms

    Apple to launch ‘MLS Season Pass’ subscription on February 1 • TechCrunch

    Apple to launch ‘MLS Season Pass’ subscription on February 1 • TechCrunch

    5 Ways to Boost Data Security on the Cloud

    5 Ways to Boost Data Security on the Cloud

    Qualcomm announces Snapdragon 8 Gen 2

    Qualcomm announces Snapdragon 8 Gen 2

    As product-led growth expands, Loops digs into the data to track key metrics • TechCrunch

    As product-led growth expands, Loops digs into the data to track key metrics • TechCrunch

    Data breaches are happening in every organization, no matter the size, says VP encryption, Thales

    Data breaches are happening in every organization, no matter the size, says VP encryption, Thales

    Koo launches a bunch of new features to attract more Indian users as Twitter drama intensifies

    Koo launches a bunch of new features to attract more Indian users as Twitter drama intensifies- Technology News, Firstpost

    Apple Sued for Allegedly Collecting User Data, Violating Its Own Privacy Policies

    Apple Sued for Allegedly Collecting User Data, Violating Its Own Privacy Policies

    • Devices
    • Streaming
    • Security
  • DEV
  • How To
    Bollywood's Top Iconic Indian Destinations

    Bollywood’s Top Iconic Indian Destinations

    Qualcomm announces Snapdragon AR2, S5 and S3 Gen 2 platforms

    Qualcomm announces Snapdragon AR2, S5 and S3 Gen 2 platforms

    Apple to launch ‘MLS Season Pass’ subscription on February 1 • TechCrunch

    Apple to launch ‘MLS Season Pass’ subscription on February 1 • TechCrunch

    5 Ways to Boost Data Security on the Cloud

    5 Ways to Boost Data Security on the Cloud

    Qualcomm announces Snapdragon 8 Gen 2

    Qualcomm announces Snapdragon 8 Gen 2

    As product-led growth expands, Loops digs into the data to track key metrics • TechCrunch

    As product-led growth expands, Loops digs into the data to track key metrics • TechCrunch

    Data breaches are happening in every organization, no matter the size, says VP encryption, Thales

    Data breaches are happening in every organization, no matter the size, says VP encryption, Thales

    Koo launches a bunch of new features to attract more Indian users as Twitter drama intensifies

    Koo launches a bunch of new features to attract more Indian users as Twitter drama intensifies- Technology News, Firstpost

    Apple Sued for Allegedly Collecting User Data, Violating Its Own Privacy Policies

    Apple Sued for Allegedly Collecting User Data, Violating Its Own Privacy Policies

    • Photography
  • Accessories
  • Business
    Bollywood's Top Iconic Indian Destinations

    Bollywood’s Top Iconic Indian Destinations

    Qualcomm announces Snapdragon AR2, S5 and S3 Gen 2 platforms

    Qualcomm announces Snapdragon AR2, S5 and S3 Gen 2 platforms

    Apple to launch ‘MLS Season Pass’ subscription on February 1 • TechCrunch

    Apple to launch ‘MLS Season Pass’ subscription on February 1 • TechCrunch

    5 Ways to Boost Data Security on the Cloud

    5 Ways to Boost Data Security on the Cloud

    Qualcomm announces Snapdragon 8 Gen 2

    Qualcomm announces Snapdragon 8 Gen 2

    As product-led growth expands, Loops digs into the data to track key metrics • TechCrunch

    As product-led growth expands, Loops digs into the data to track key metrics • TechCrunch

    Data breaches are happening in every organization, no matter the size, says VP encryption, Thales

    Data breaches are happening in every organization, no matter the size, says VP encryption, Thales

    Koo launches a bunch of new features to attract more Indian users as Twitter drama intensifies

    Koo launches a bunch of new features to attract more Indian users as Twitter drama intensifies- Technology News, Firstpost

    Apple Sued for Allegedly Collecting User Data, Violating Its Own Privacy Policies

    Apple Sued for Allegedly Collecting User Data, Violating Its Own Privacy Policies

    • Marketing
No Result
View All Result
Android Buzz
  • News
  • Phones
  • Apps
  • Games
  • Reviews
  • Tech
    Bollywood's Top Iconic Indian Destinations

    Bollywood’s Top Iconic Indian Destinations

    Qualcomm announces Snapdragon AR2, S5 and S3 Gen 2 platforms

    Qualcomm announces Snapdragon AR2, S5 and S3 Gen 2 platforms

    Apple to launch ‘MLS Season Pass’ subscription on February 1 • TechCrunch

    Apple to launch ‘MLS Season Pass’ subscription on February 1 • TechCrunch

    5 Ways to Boost Data Security on the Cloud

    5 Ways to Boost Data Security on the Cloud

    Qualcomm announces Snapdragon 8 Gen 2

    Qualcomm announces Snapdragon 8 Gen 2

    As product-led growth expands, Loops digs into the data to track key metrics • TechCrunch

    As product-led growth expands, Loops digs into the data to track key metrics • TechCrunch

    Data breaches are happening in every organization, no matter the size, says VP encryption, Thales

    Data breaches are happening in every organization, no matter the size, says VP encryption, Thales

    Koo launches a bunch of new features to attract more Indian users as Twitter drama intensifies

    Koo launches a bunch of new features to attract more Indian users as Twitter drama intensifies- Technology News, Firstpost

    Apple Sued for Allegedly Collecting User Data, Violating Its Own Privacy Policies

    Apple Sued for Allegedly Collecting User Data, Violating Its Own Privacy Policies

    • Devices
    • Streaming
    • Security
  • DEV
  • How To
    Bollywood's Top Iconic Indian Destinations

    Bollywood’s Top Iconic Indian Destinations

    Qualcomm announces Snapdragon AR2, S5 and S3 Gen 2 platforms

    Qualcomm announces Snapdragon AR2, S5 and S3 Gen 2 platforms

    Apple to launch ‘MLS Season Pass’ subscription on February 1 • TechCrunch

    Apple to launch ‘MLS Season Pass’ subscription on February 1 • TechCrunch

    5 Ways to Boost Data Security on the Cloud

    5 Ways to Boost Data Security on the Cloud

    Qualcomm announces Snapdragon 8 Gen 2

    Qualcomm announces Snapdragon 8 Gen 2

    As product-led growth expands, Loops digs into the data to track key metrics • TechCrunch

    As product-led growth expands, Loops digs into the data to track key metrics • TechCrunch

    Data breaches are happening in every organization, no matter the size, says VP encryption, Thales

    Data breaches are happening in every organization, no matter the size, says VP encryption, Thales

    Koo launches a bunch of new features to attract more Indian users as Twitter drama intensifies

    Koo launches a bunch of new features to attract more Indian users as Twitter drama intensifies- Technology News, Firstpost

    Apple Sued for Allegedly Collecting User Data, Violating Its Own Privacy Policies

    Apple Sued for Allegedly Collecting User Data, Violating Its Own Privacy Policies

    • Photography
  • Accessories
  • Business
    Bollywood's Top Iconic Indian Destinations

    Bollywood’s Top Iconic Indian Destinations

    Qualcomm announces Snapdragon AR2, S5 and S3 Gen 2 platforms

    Qualcomm announces Snapdragon AR2, S5 and S3 Gen 2 platforms

    Apple to launch ‘MLS Season Pass’ subscription on February 1 • TechCrunch

    Apple to launch ‘MLS Season Pass’ subscription on February 1 • TechCrunch

    5 Ways to Boost Data Security on the Cloud

    5 Ways to Boost Data Security on the Cloud

    Qualcomm announces Snapdragon 8 Gen 2

    Qualcomm announces Snapdragon 8 Gen 2

    As product-led growth expands, Loops digs into the data to track key metrics • TechCrunch

    As product-led growth expands, Loops digs into the data to track key metrics • TechCrunch

    Data breaches are happening in every organization, no matter the size, says VP encryption, Thales

    Data breaches are happening in every organization, no matter the size, says VP encryption, Thales

    Koo launches a bunch of new features to attract more Indian users as Twitter drama intensifies

    Koo launches a bunch of new features to attract more Indian users as Twitter drama intensifies- Technology News, Firstpost

    Apple Sued for Allegedly Collecting User Data, Violating Its Own Privacy Policies

    Apple Sued for Allegedly Collecting User Data, Violating Its Own Privacy Policies

    • Marketing
Android Buzz
No Result
View All Result
Home Security

It’s time to prioritize SaaS security

by Staff Writer
in Security
One lock in a series is unlocked / weakness / vulnerability
61
SHARES
558
VIEWS
Share on FacebookShare on Twitter

We’ve made a point of shoring up security for infrastructure-as-a-service clouds since they are so complex and have so many moving parts. Unfortunately, the many software-as-a-service systems in use for more than 20 years now have fallen down the cloud security priority list.

Organizations are making a lot of assumptions about SaaS security. At their essence, SaaS systems are applications that run remotely, with data stored on back-end systems that the SaaS provider encrypts on the customer’s behalf. You may not even know what database is storing your accounting, CRM, or inventory data—and you were told that you should not really care. After all, the provider runs the entire system for you, and users and admins just leverage it through some web browser. Indeed, SaaS means that you are abstracted much further away from the components than other forms of cloud computing.

SaaS, as indicated in most marketing studies, is the largest part of the cloud computing market. This is not well understood since the focus these days is on IaaS clouds such as AWS, Microsoft, and Google, which have drawn attention away from the largely fragmented world of SaaS clouds, which are mostly as-a-service business processes you access through a browser. But SaaS also now includes backup and recovery systems and other services that are more IaaS-like but are delivered using the SaaS approach to cloud computing. They remove you from dealing with all of the nitty-gritty details, which is what cloud should be doing.

I suspect that SaaS cloud security will become more of a priority once a few well-published breaches hit the media. You can bet these are indeed occurring, but unless the public is affected directly, breaches usually don’t make it to a press release.

What do we need to look out for when it comes to SaaS security?

Core to SaaS security problems is human error. Misconfigurations occur when admins grant user access rights or permissions too frequently. The people who perhaps should not have been granted rights can end up misconfiguring the SaaS interfaces, such as API or user interface access. Although this is not much of an issue if rights are restricted, too often people who need only simple data access to a single data entity (such as inventory) are given access to all the data. This can be exploited into devastating data breaches that are highly avoidable.

This is normally an issue with data access that the SaaS vendor provides via user interfaces and API access. However, problems also arise with data integration layers that the SaaS customers install to sync data in the SaaS cloud with other IaaS cloud-hosted databases or, more likely, back to legacy systems that are still held in-house. These data integration layers are often easily breached for the reason just mentioned—mishandling of access rights. The data integration layers themselves, much of which are also SaaS-delivered, may have vulnerabilities. Either way, your data is still breached.

Other security issues are easier to understand. An employee decides to take out some frustrations on the company and copies most of the SaaS-hosted data to a USB drive and removes it from the building. Much like granting more access privileges than someone needs, this is easily addressed with restrictions and more education.

On the SaaS providers’ side, issues include a lack of transparency, such as their own employees walking out of the building with customer data, or breaches that have gone unreported. It’s impossible to know how many of these situations have occurred, but if you’ve had zero reported to you, it may be an indication that your SaaS provider is holding back information that might be damaging to them.

SaaS security is both an old and a new approach and technology stack. It was the first cloud security I worked on, and we’ve come a long way since then. However, SaaS security has not received as much funding, love, or education as other areas of cloud security. We may pay for that at some point unless we get things fixed now.

Copyright © 2022 IDG Communications, Inc.

Source by www.infoworld.com

Share24Tweet15SendPin5

Related Posts

Hashtag Trending Nov.17-Taylor Swift crashes Ticketmaster; FTX owes a million people; Google awards security researcher
Security

Hashtag Trending Nov.17-Taylor Swift crashes Ticketmaster; FTX owes a million people; Google awards security researcher

November 17, 2022
Mozilla Releases Gift Guide With Privacy in Mind
Security

Mozilla Releases Gift Guide With Privacy in Mind

November 16, 2022
Apple is sued after its proven that privacy settings don't stop iPhone from tracking users
Security

Apple is sued after its proven that privacy settings don’t stop iPhone from tracking users

November 15, 2022
Cyber Security Today, Nov. 14, 2022 – Lessons from cyber attacks against Ukraine, and beware of attempted extortion emails
Security

Cyber Security Today, Nov. 14, 2022 – Lessons from cyber attacks against Ukraine, and beware of attempted extortion emails

November 14, 2022
Dare I Say It's the "Perfect" Google Phone?
Security

FTX is investigating a potential hack

November 12, 2022
Apple Sued Over iPhone Privacy Settings After Gizmodo Story
Security

Apple Sued Over iPhone Privacy Settings After Gizmodo Story

November 12, 2022

Recommended

Terrifying Unreal 5 found footage game looks so real you

Terrifying Unreal 5 found footage game looks so real you’ll have nightmares

October 29, 2022
Matter Smart Home Standard Officially Launches With 190 Devices Supported

Matter Smart Home Standard Officially Launches With 190 Devices Supported

November 5, 2022
iOS 16.2 beta 2 now available, here are the top features

iOS 16.2 beta 2 now available, here are the top features

November 8, 2022
clock with hands pointing to

GitHub faces lawsuit over Copilot AI coding assistant

November 12, 2022
Realme Watch 3 Pro Review Lead image

Gets a lot of things right except battery backup- Technology News, Firstpost

October 8, 2022
Dare I Say It's the "Perfect" Google Phone?

Dare I Say It’s the “Perfect” Google Phone?

October 20, 2022
  • Home
  • About
  • Privacy
  • Contact
  • DCMA
  • Terms
  • Submit / Write For Us
© 2021 androidbuzz.net
No Result
View All Result
  • News
  • Phones
  • Apps
  • Games
  • Reviews
  • Tech
    • Devices
    • Streaming
    • Security
  • DEV
  • How To
    • Photography
  • Accessories
  • Business
    • Marketing