Community
Safety nets on the Cloud Highway
Whatever could be the reason, worldwide cloud enabled banking transformations has picked pace at an unprecedented speed. Evidence is everywhere like the raise of Opex models, higher share of SAAS offerings, Digital only branches, and usage of Multi tenancy etc. So is also the raise of leakages and the attacks on the cloud. Hence banks accelerating on this super cloud highway also needs be vary of when to apply brakes and where to place the safety nets
Cloudified & Security?
On the outer side cloud security refers to protecting data on cloud but then there is so much complexity behind this seemingly simple word. It makes me wonder how innovative can the breachers and hackers be. To just name a few are, the threat of DDOS (Distributed Denial of service attack), undercover attacks through IOT devices, hijacking at service as well as account level, Phishing, or ransomware attacks not just on customer side but also through bankers’ systems.
To protect a system, one needs to know how to break the system. Going in the same way, if we must protect the offering on cloud, we also need to know what the hackers do. To put in a nutshell: they first try to gather the footprints of the target either by passively checking on social website or actively hinging on to an insider using social engineering attack. Next, they try to do a port scanning – wherein they identify where is the application hosted on the network. Third the hackers try to get access or control on the OS using some vulnerability could be password or injections etc. Hacking does not stop here, now it is time to maintain access by way of backdoors, trojans and other type of malwares. I thought this was the end but no there is one last thing they do, which is clearing their tracks – which means hackers will ensure that the owner does not know that they have gained access, so they clear the logs and other proofs. I could not believe that there is so much engineering in this too!!!
Where are your Parachutes? Qualitative & Quantitative intelligent safety nets
“Every problem contains within itself the seeds of its own solution” – Stanley Arnold
Conclusion: My way is the highway with safety nets in place
There is no seeing back on the cloud highway, banks need to steadfast. While the security risk is real on cloud, but the benefits that bank gets on cloud migration overtake these risks. Hence the way forward is to have a basic but a robust framework in place to safeguard as listed below:
1) Initially assess how much secure is the cloud infra in comparison with security benchmarks
2) Use Automation and Machine learning to constantly detect the security threats
3) Have a stringent access management. There needs to be a BCP (business contingency plan) by regularly backing up data – so that downtime can be minimized even if there is an attack.
4) Ensure that critical digital assets are cryptographically encrypted
5) Last but not the least, securely protect and manage the keys
This content is provided by an external author without editing by Finextra. It expresses the views and opinions of the author.
Oleksandr Strozhemin Co-founder and CEO at Trinetix
13 August
Elaine Mullan Head of Marketing and Business Development at Corlytics
12 August
Abhinav Paliwal CEO at PayNet Systems- A Neo Banking Software Platform
Donica Venter Marketing coordinator at Traderoot
Welcome to Finextra. We use cookies to help us to deliver our services. You may change your preferences at our Cookie Centre.
Please read our Privacy Policy.