Fake news alert! Internet breaches are not cloud breaches

analysis
Jan 20, 20172 mins

Ignorant reporting conflates the internet with the cloud; as a result, people lose trust in what is actually a very secure platform

Computer monitor with pixelated locks for security breach
Credit: Thinkstock

Hacked accounts are in the news on practically a daily basis: Yahoo uncovered another massive cyberattack, with more than 1 billion user accounts compromised, making it the largest breach in history. The Democratic National Committee’s email was hacked, as was the Hillary Clinton campaign’s and the Republican National Committee’s. Let’s not forget about Home Depot, Target, and all those IoT hacks as well.

What do these all have in common? Not one of them is a cloud-based attack.

But you wouldn’t know it from the press. I get calls from reporters about once a week, all talking about the future of cloud computing given these “cloud breaches.” But none of those breaches has anything to do with cloud computing.

Yahoo is not Amazon Web Services, the DNC email server is not Microsoft Exchange Online, and no IoT device is a cloud.

The fact of the matter is that the public cloud services have a good record when it comes to breaches—there’ve been almost none so far, in fact. Moreover, the cloud breaches I’ve seen have resulted from user errors, not an issue with the public cloud itself. Generally speaking, it remains true that the public cloud is more secure than on-premises systems.

The issue is really a PR problem. To laypeople, everything that’s hosted on the internet is a cloud, but of course that’s not the case.

In fact, public clouds are secure systems. They manage many tenants and have elastic scaling, with proactive security and governance. Although not perfect, they are a hell of a lot more secure than Yahoo Mail ever was.

Still, I fear the ignorant reporting could be giving cloud computing an undeserved black eye, just as IT organizations are starting to get past their unfounded fears around cloud security. Let’s start educating people to the truth. No fake news here, please!

David Linthicum

David S. Linthicum is an internationally recognized industry expert and thought leader. Dave has authored 13 books on computing, the latest of which is An Insider’s Guide to Cloud Computing. Dave’s industry experience includes tenures as CTO and CEO of several successful software companies, and upper-level management positions in Fortune 100 companies. He keynotes leading technology conferences on cloud computing, SOA, enterprise application integration, and enterprise architecture. Dave writes the Cloud Insider blog for InfoWorld. His views are his own.

More from this author