How to keep applications secure in a private cloud

Security is a key area of application performance and delivery

Many organisations are considering the best methods for building and managing their private cloud deployments, with private cloud adoption rising from 63% to 77% over the last year.

As private clouds increasingly host mission-critical production applications, security increasingly comes into focus as a key part of application performance and delivery.

Advertisement - Article continues below

Network and application security concerns in a private cloud are largely the same as those faced by enterprises in traditional data centres and in the public cloud. Organisations confront web application threats, issues of identity and access management, mitigation of distributed denial-of-service (DDoS) attacks and SSL and encryption concerns in their efforts to secure their applications and ensure that private data remains private.

Web application firewall

When considering implementing a private cloud architecture, organisations must deploy advanced network firewall services, including a solution that can control traffic using basic criteria such as IP address, port and protocol, as well as advanced principles such as HTTP protocol validation, geographical location or endpoint reputation. In addition, a robust WAF can provide comprehensive tools to identify web application threats, block malicious traffic and offer outbound data loss prevention services.

Identity & access management

Managing identity and access in a cloud computing environment with an increasingly distributed mobile workforce becomes more complex every day. Enterprises require a solution that provides advanced authentication services, such as two-factor tokens, CAPTCHA, or geographical restrictions as well as client certificate checking and endpoint inspection. In addition, many organisations consider deploying SAML identity provider services to provide an architecturally sound single sign-on (SSO) solution throughout the enterprise.

Advertisement
Advertisement - Article continues below
Advertisement - Article continues below

DoS & DDoS

With more and more sites facing multiple denial-of-service (DoS) attacks each year, DoS mitigation services are a necessity for most enterprises running private clouds. A strong solution provides proactive bot defence as well as application-layer DoS detection and mitigation.

SSL

Finally, in the contemporary business world, Secure Sockets Layer (SSL) is everywhere. Analysts predict that encrypted traffic will jump to nearly 64% of all North American online traffic in 2016, up from just 29% in 2015. Enterprises must ensure security with a strong SSL solution that provides decryption, traffic inspection and re-encryption, as well as optimise performance by offloading of computationally intensive SSL workloads from compute node resources.

Featured Resources

Preparing for long-term remote working after COVID-19

Learn how to safely and securely enable your remote workforce

Download now

Cloud vs on-premise storage: What’s right for you?

Key considerations driving document storage decisions for businesses

Download now

Staying ahead of the game in the world of data

Create successful marketing campaigns by understanding your customers better

Download now

Transforming productivity

Solutions that facilitate work at full speed

Download now
Advertisement

Recommended

Visit/security/ransomware/356292/university-of-california-gets-fleeced-by-hackers-for-114-million
ransomware

University of California gets fleeced by hackers for $1.14 million

30 Jun 2020
Visit/security/cyber-security/356289/australia-announces-135b-investment-in-cybersecurity
cyber security

Australia announces $1.35 billion investment in cyber security

30 Jun 2020
Visit/cloud/cloud-security/356288/csa-and-issa-form-cybersecurity-partnership
cloud security

CSA and ISSA form cyber security partnership

30 Jun 2020
Visit/business/policy-legislation/356215/senators-propose-a-bill-aimed-at-ending-warrant-proof-encryption
Policy & legislation

Senators propose a bill aimed at ending warrant-proof encryption

24 Jun 2020

Most Popular

Visit/mobile/google-android/356373/over-2-dozen-additional-android-apps-found-stealing-user-data
Google Android

Over two dozen Android apps found stealing user data

7 Jul 2020
Visit/laptops/29190/how-to-find-ram-speed-size-and-type
Laptops

How to find RAM speed, size and type

24 Jun 2020
Visit/cloud/356260/the-road-to-recovery
Sponsored

The road to recovery

30 Jun 2020