Cloud advantage or cost?

1 August 2019 Cyber Security, IT infrastructure

It seems as though each day brings another article about IoT, big data analytics and cloud architectures talking about the unlimited potential for companies trying to gain a competitive edge in an increasingly digital world. Early adopters, who are a bit further along the road to digital transformation, are already enjoying some the benefits of the public cloud, like economies of scale, utility billing and more.

“What may not be entirely clear, however, is how the shared security model of the public cloud affects your security responsibilities,” says Simon McCullough, major channel account manager at F5 in South Africa.

“While cloud providers typically do an excellent job of managing the security of their physical data centres, infrastructure and rented systems, they can’t do much about the things businesses deploy or put in the cloud, namely applications, services and data.”

At the same time, according to F5 Labs research, 53 percent of data breaches initially target the application layer, so, no matter how you look at it, security in the cloud is as important as security in traditional data centres.

Speak to any business owner who’s felt the effect of a breach and you’ll be told that a robust and agile web application firewall (WAF) isn’t a “might do” any more but is rather a non-negotiable.

Traditionally, says another F5 white paper, WAFs were deployed as hardware appliances on premises in enterprise data centres. With applications migrating to cloud-based Infrastructure-as-a-Service (IaaS) environments and organisations leveraging cloud Software-as-a-Service (SaaS) apps, security teams are challenged to protect applications beyond the data centre—without compromising performance, scalability, and manageability.

Enter the WAF

“In our report, titled The Hidden ROI of Cloud-Friendly Security, we talk about the fact that 40 percent of all traffic can be unwanted bots, malware, scanners and the like and that you, as a business, are paying their way,” he continues.

“Most businesses are billed on a utility basis when it comes to traffic for applications in the cloud and incur real, quantifiable costs every time a bot makes a request of any resource associated with your cloud account. This means companies are likely paying hefty bills as a result of non-customer traffic.”

Deploying solid security tools, like Application Delivery Controllers (ADCs) and WAFs in front of cloud-based apps can protect these applications and save money by filtering out costly, unwanted traffic while effectively reducing the resources allocated to servicing bots and scanners.

“Using an ADC or WAF in the cloud can deliver measurable return on the cost of your investment while ensuring services stay available and secure,” says McCullough.

Security tool choice matters to the cloud

Anton Jacobsz, managing director at Networks Unlimited Africa, a value-added distributor of F5 in Africa, says it doesn’t end there. “Good security tools can better enable and inform business intelligence,” he says. “A WAF or ADC can make it easier to analyse traffic patterns and data to and from the cloud-based web applications and, with that data at hand, businesses will be better equipped to make resource management decisions that can cut costs quite dramatically.”

According to the 2017 WhiteHat Security Application Security Report, almost all apps contain three or more vulnerabilities, with half of those being critical. This equates to an increased risk of data loss, theft or denial of service if not remedied quite quickly – which is where WAFs can help.

Development teams are now able to use the capabilities inherent to WAFs to address OWASP Top 10 risk areas, mitigating layer 7 DOS attacks, detecting and managing bot activity and foiling zero-day attacks.

“This is all outside of, and without interruption to, normal development cycles,” says Jacobsz. “Behavioural analysis can also prove to be very effective in identifying patterns and managing traffic to and from your cloud-based web applications.

“And, while these capabilities can be difficult to build and manage on your own, a solid security solution provider will help make the implementation of these services simple and effective.

“You may not suspect anyone of targeting your business but those of a trusting nature are a cyber criminal’s dream,” he says. “The safest approach is to implement security tools that can not only help reduce costs but can also provide the right level of protection for the smooth operation and success of cloud-based applications.”

For more information, contact Esti Bosch, Networks Unlimited, esti.bosch@nu.co.za





Share this article:
Share via emailShare via LinkedInPrint this page



Further reading:

Cybersecurity comment: Cyber threats remain relentless
Issue 4 2020, CA Southern Africa , Cyber Security
Over 80% of email-based threats in Q1 2020 leverage COVID-19 in some form to feign legitimacy to the end user.

Read more...
11 essential steps to reinforce cybersecurity
Issue 4 2020 , Cyber Security
Wayne Olsen has compiled a guideline to ensure that businesses and their employees are protected while working remotely.

Read more...
Cybersecurity comment: Securing the real endpoint
Issue 4 2020 , Cyber Security
The corporate perimeter is fast becoming irrelevant, as the so-called security boundary extends to wherever an Internet connection exists.

Read more...
Don’t squeeze your cyber assets
Issue 4 2020 , Cyber Security
Inadequate investment in cybersecurity is directly related to the spate of cyberattacks we’re seeing in South Africa now.

Read more...
Cybersecurity comment: Create layers of security
Issue 4 2020 , Cyber Security
Any organisation, whether large or small, public or private, should follow an established framework in order to protect itself against cyber threats.

Read more...
Next-generation security operations centre
Issue 4 2020, AVeS Cyber Security , Cyber Security
Pay-as-you-use cybersecurity from AveS allows all businesses access to world-class expertise.

Read more...
Strengthen your passwords for world password day
Issue 4 2020 , Cyber Security
May 7 is World Password Day and KnowBe4 is providing tip sheets, videos and tools to help people strengthen their passwords.

Read more...
Tips on secure remote working
Issue 3 2020 , IT infrastructure, Cyber Security
NordVPN advises how to stay secure while working from home during the coronavirus outbreak.

Read more...
The Trojan that’s nearly impossible to remove
Issue 3 2020, Kaspersky , Cyber Security
xHelper – the Trojan that’s nearly impossible to remove – continues to infect thousands of devices. How can you stay safe?

Read more...
Have your security on lockdown over the lockdown
Issue 3 2020, Vox Telecom , Cyber Security
It’s a given that people working from home have fewer security defences on their home networks than they would have in the office.

Read more...