{"id":542,"date":"2015-05-27T14:17:07","date_gmt":"2015-05-27T18:17:07","guid":{"rendered":"https:\/\/solutionsreview.com\/cloud-platforms\/?p=542"},"modified":"2018-07-05T17:01:43","modified_gmt":"2018-07-05T21:01:43","slug":"how-secure-is-your-iaas-compare-the-top-5-csps-security","status":"publish","type":"post","link":"https:\/\/solutionsreview.com\/cloud-platforms\/how-secure-is-your-iaas-compare-the-top-5-csps-security\/","title":{"rendered":"How Secure Is Your IaaS? Compare The Top 5 CSP’s Security"},"content":{"rendered":"

\"fortycloud<\/a><\/p>\n

 <\/p>\n

In a new report, IaaS Security State of Industry<\/em>, cloud security solutions provider FourtyCloud released \u00a0the results of their yearly survey of major public IaaS cloud service providers (CSPs). What they found might surprise you.<\/p>\n

For their report, FourtyClouds surveyed the security capabiliteis of the top five IaaS providers\u2014 Amazon Web Services (AWS), Google Cloud Platform (GCP), IBM Cloud, Rackspace, and Azure<\/a>\u2014 with a specific focus on data and network security, as well as identity and access management<\/a> (IAM).<\/p>\n

FortyClouds notes that, while the cloud IaaS market continues to grow (Gartner predicts<\/a> 38% growth in coming years), none of the leading CSP\u2019s native public cloud offerings have shown strong advances in security in the past year. FortyClouds recommends that IaaS customers augment their IaaS solutions with third party security solutions.<\/p>\n

[From AWS to Rackspace, Solutions Review rounds up the top 28 cloud vendors in the 2015 Cloud Platform Solutions Buyer\u2019s Guide. Solutions Review Buyer\u2019s Guides include full market overviews and 10 questions designed to help find your best fit in the cloud. <\/b>Download your free copy today.<\/a><\/strong>]<\/b><\/h5>\n

FortyCloud\u2019s research examines seven features of each CSP\u2019s native security abilities, here’s how they’re defined in the blog post:<\/p>\n

Shared Cloud Network<\/b>: The public IaaS environment where cloud customers share a cloud service subnet. Each VM usually has a public IP address (permanent or temporary) as well as service IP address for the internal cloud service network.<\/p>\n

Virtual Private Cloud (VPC) Network<\/b>: The IaaS provider supports an isolation of customer\u2019s cloud deployments, such that a customer can have a private subnet that is not reachable from other customers cloud servers or from the public internet.<\/p>\n

Firewall<\/b>: <\/b>Collection of policies and rules to control the traffic allowed between a group of cloud servers or static IP addresses.<\/b><\/p>\n

Identity-based access management (IAM)<\/b>: Firewall rules based on user identity that allow specific users to access specific sets of compute resources.<\/p>\n

Secure extension<\/b>:The ability to securely connect enterprise sites to the cloud deployment (usually a virtual private network) via static IPSec connections.<\/p>\n

Secure remote access to individual servers<\/b>:The ability to access an individual VM using a secure protocol (such as SSH or RDP); this type of remote access is usually based on credentials that are specific to a single user and a single server.<\/p>\n

Remote VPN access<\/b>:\u00a0The ability of the organization\u2019s employees to securely connect on demand to the cloud deployment remotely using VPN clients; this includes central authentication of the employee’s\u2019 identity prior to gaining access to the cloud deployment (art of all of cloud servers).<\/p>\n

 <\/p>\n

 <\/p>\n

\"Click<\/a>

Click to enlarge.<\/p><\/div>\n

FortyCloud calls the shared cloud network \u201cthe least secure public IaaS option,\u201d noting that access to individual tenant\u2019s compute resources could be obtained by others from within the cloud data center.<\/p>\n

AWS EC2 Classic and Rackspace both provide shared cloud networks, though the former is currently transitioning to using VPCs as the default for new environments. The other three vendors evaluated do not offer shared cloud networks, instead they opt for more secure virtual private networks.<\/p>\n

In the firewall category, AWS and GCP offer full firewall controls and configurations, while Azure offers endpoint only firewall capabilities. Rackspace and IBM do not offer any stock firewall capabilities.<\/p>\n

Notably, none of the major IaaS CSPs offer native IAM solutions, though there are dozens of third party solutions available<\/a>. Azure does provide dynamic client based VPN access to the cloud, but does not support identity based access.<\/p>\n

FortyCloud adds that several CSPs do offer central-identity based access to service management consoles and APIs, but not to the cloud servers themselves.<\/p>\n

FourtyCloud’s comparison only considered security features native to each public cloud IaaS offering. In many cases, missing security features can be supplemented with additional paid services available in each vendor’smarketplace.<\/p>\n

Disclaimer:<\/p>\n

It is important to note that although the completeness of security offering is an important attribute in selecting your cloud provider, other attributes like maturity, service coverage, and level of support are also important factors in such a decision. this post does not consider the later factors.<\/em><\/p>\n

To view the results of FortyCloud\u2019s research in their entirety, read their blog post here.<\/a><\/p>\n
Widget not in any sidebars
\n","protected":false},"excerpt":{"rendered":"

  In a new report, IaaS Security State of Industry, cloud security solutions provider FourtyCloud released \u00a0the results of their yearly survey of major public IaaS cloud service providers (CSPs). What they found might surprise you. For their report, FourtyClouds surveyed the security capabiliteis of the top five IaaS providers\u2014 Amazon Web Services (AWS), Google […]<\/p>\n","protected":false},"author":24,"featured_media":543,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"inline_featured_image":false,"footnotes":""},"categories":[2,1],"tags":[41,111,109,37,34,112,79],"acf":[],"yoast_head":"\nHow Secure Is Your IaaS? Compare The Top 5 CSP's Security<\/title>\n<meta name=\"description\" content=\"Security service FortyCloud has compared the top 5 IaaS CSPs\u2014 AWS, Azure, Google, Rackspace, and IBM\u2014 across 8 metrics.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/solutionsreview.com\/cloud-platforms\/how-secure-is-your-iaas-compare-the-top-5-csps-security\/\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Jeff Edwards\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"4 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"WebPage\",\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/how-secure-is-your-iaas-compare-the-top-5-csps-security\/\",\"url\":\"https:\/\/solutionsreview.com\/cloud-platforms\/how-secure-is-your-iaas-compare-the-top-5-csps-security\/\",\"name\":\"How Secure Is Your IaaS? Compare The Top 5 CSP's Security\",\"isPartOf\":{\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/#website\"},\"primaryImageOfPage\":{\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/how-secure-is-your-iaas-compare-the-top-5-csps-security\/#primaryimage\"},\"image\":{\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/how-secure-is-your-iaas-compare-the-top-5-csps-security\/#primaryimage\"},\"thumbnailUrl\":\"https:\/\/solutionsreview.com\/cloud-platforms\/files\/2015\/05\/fortycloudheader.jpg\",\"datePublished\":\"2015-05-27T18:17:07+00:00\",\"dateModified\":\"2018-07-05T21:01:43+00:00\",\"author\":{\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6\"},\"description\":\"Security service FortyCloud has compared the top 5 IaaS CSPs\u2014 AWS, Azure, Google, Rackspace, and IBM\u2014 across 8 metrics.\",\"breadcrumb\":{\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/how-secure-is-your-iaas-compare-the-top-5-csps-security\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/solutionsreview.com\/cloud-platforms\/how-secure-is-your-iaas-compare-the-top-5-csps-security\/\"]}]},{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/how-secure-is-your-iaas-compare-the-top-5-csps-security\/#primaryimage\",\"url\":\"https:\/\/solutionsreview.com\/cloud-platforms\/files\/2015\/05\/fortycloudheader.jpg\",\"contentUrl\":\"https:\/\/solutionsreview.com\/cloud-platforms\/files\/2015\/05\/fortycloudheader.jpg\",\"width\":600,\"height\":270},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/how-secure-is-your-iaas-compare-the-top-5-csps-security\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/solutionsreview.com\/cloud-platforms\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"How Secure Is Your IaaS? Compare The Top 5 CSP’s Security\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/#website\",\"url\":\"https:\/\/solutionsreview.com\/cloud-platforms\/\",\"name\":\"Best Enterprise Cloud Strategy Tools, Vendors, Managed Service Providers, MSP and Solutions\",\"description\":\"Guides, Analysis and Best Practices\",\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/solutionsreview.com\/cloud-platforms\/?s={search_term_string}\"},\"query-input\":{\"@type\":\"PropertyValueSpecification\",\"valueRequired\":true,\"valueName\":\"search_term_string\"}}],\"inLanguage\":\"en-US\"},{\"@type\":\"Person\",\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6\",\"name\":\"Jeff Edwards\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/solutionsreview.com\/cloud-platforms\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=blank&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=blank&r=g\",\"caption\":\"Jeff Edwards\"},\"description\":\"Jeff Edwards is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in Journalism from the University of Massachusetts Amherst, and previously worked as a reporter covering Boston City Hall.\",\"sameAs\":[\"https:\/\/solutionsreview.com\",\"https:\/\/x.com\/InfoSec_Review\"],\"url\":\"https:\/\/solutionsreview.com\/cloud-platforms\/author\/jedwards\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"How Secure Is Your IaaS? Compare The Top 5 CSP's Security","description":"Security service FortyCloud has compared the top 5 IaaS CSPs\u2014 AWS, Azure, Google, Rackspace, and IBM\u2014 across 8 metrics.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/solutionsreview.com\/cloud-platforms\/how-secure-is-your-iaas-compare-the-top-5-csps-security\/","twitter_misc":{"Written by":"Jeff Edwards","Est. reading time":"4 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"WebPage","@id":"https:\/\/solutionsreview.com\/cloud-platforms\/how-secure-is-your-iaas-compare-the-top-5-csps-security\/","url":"https:\/\/solutionsreview.com\/cloud-platforms\/how-secure-is-your-iaas-compare-the-top-5-csps-security\/","name":"How Secure Is Your IaaS? Compare The Top 5 CSP's Security","isPartOf":{"@id":"https:\/\/solutionsreview.com\/cloud-platforms\/#website"},"primaryImageOfPage":{"@id":"https:\/\/solutionsreview.com\/cloud-platforms\/how-secure-is-your-iaas-compare-the-top-5-csps-security\/#primaryimage"},"image":{"@id":"https:\/\/solutionsreview.com\/cloud-platforms\/how-secure-is-your-iaas-compare-the-top-5-csps-security\/#primaryimage"},"thumbnailUrl":"https:\/\/solutionsreview.com\/cloud-platforms\/files\/2015\/05\/fortycloudheader.jpg","datePublished":"2015-05-27T18:17:07+00:00","dateModified":"2018-07-05T21:01:43+00:00","author":{"@id":"https:\/\/solutionsreview.com\/cloud-platforms\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6"},"description":"Security service FortyCloud has compared the top 5 IaaS CSPs\u2014 AWS, Azure, Google, Rackspace, and IBM\u2014 across 8 metrics.","breadcrumb":{"@id":"https:\/\/solutionsreview.com\/cloud-platforms\/how-secure-is-your-iaas-compare-the-top-5-csps-security\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/solutionsreview.com\/cloud-platforms\/how-secure-is-your-iaas-compare-the-top-5-csps-security\/"]}]},{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/cloud-platforms\/how-secure-is-your-iaas-compare-the-top-5-csps-security\/#primaryimage","url":"https:\/\/solutionsreview.com\/cloud-platforms\/files\/2015\/05\/fortycloudheader.jpg","contentUrl":"https:\/\/solutionsreview.com\/cloud-platforms\/files\/2015\/05\/fortycloudheader.jpg","width":600,"height":270},{"@type":"BreadcrumbList","@id":"https:\/\/solutionsreview.com\/cloud-platforms\/how-secure-is-your-iaas-compare-the-top-5-csps-security\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/solutionsreview.com\/cloud-platforms\/"},{"@type":"ListItem","position":2,"name":"How Secure Is Your IaaS? Compare The Top 5 CSP’s Security"}]},{"@type":"WebSite","@id":"https:\/\/solutionsreview.com\/cloud-platforms\/#website","url":"https:\/\/solutionsreview.com\/cloud-platforms\/","name":"Best Enterprise Cloud Strategy Tools, Vendors, Managed Service Providers, MSP and Solutions","description":"Guides, Analysis and Best Practices","potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/solutionsreview.com\/cloud-platforms\/?s={search_term_string}"},"query-input":{"@type":"PropertyValueSpecification","valueRequired":true,"valueName":"search_term_string"}}],"inLanguage":"en-US"},{"@type":"Person","@id":"https:\/\/solutionsreview.com\/cloud-platforms\/#\/schema\/person\/3d31b4b6a777a91476a65c087be260e6","name":"Jeff Edwards","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/solutionsreview.com\/cloud-platforms\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=blank&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/8471d2b63e0587b41d829ecc153ba8e7?s=96&d=blank&r=g","caption":"Jeff Edwards"},"description":"Jeff Edwards is an enterprise technology writer and analyst covering Identity Management, SIEM, Endpoint Protection, and Cybersecurity writ large. He holds a Bachelor of Arts Degree in Journalism from the University of Massachusetts Amherst, and previously worked as a reporter covering Boston City Hall.","sameAs":["https:\/\/solutionsreview.com","https:\/\/x.com\/InfoSec_Review"],"url":"https:\/\/solutionsreview.com\/cloud-platforms\/author\/jedwards\/"}]}},"_links":{"self":[{"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/posts\/542"}],"collection":[{"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/users\/24"}],"replies":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/comments?post=542"}],"version-history":[{"count":0,"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/posts\/542\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/media\/543"}],"wp:attachment":[{"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/media?parent=542"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/categories?post=542"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/solutionsreview.com\/cloud-platforms\/wp-json\/wp\/v2\/tags?post=542"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}