ellen_messmer
Senior Editor, Network World

McAfee service scans cloud environments for security vulnerabilities

news
Mar 16, 20102 mins

McAfee Cloud Secure Program probes cloud service providers for any weaknesses in the network infrastructure, perimeter, and applications

McAfee Tuesday announced a vulnerability-assessment scanning service that’s aimed at giving cloud computing service providers a way to provide security assurances to their customers.

Called the McAfee Cloud Secure Program, the daily scanning service is directed from the Internet into the cloud service provider to probe for any weaknesses in the network infrastructure, perimeter, and applications, says Marc Olesen, senior vice president and general manager for McAfee’s software-as-a-service business unit.

[ Some say cloud security fears are overblown, but Cisco’s CEO calls cloud computing a ‘security nightmare.’ | Keep up with all the latest cloud news with David Linthicum’s Cloud Computing blog. ]

Are security issues delaying adoption of cloud computing?

The McAfee Cloud Secure Program, which is likely to be expande to include other security services as well, “is intended to give customers more confidence in their cloud providers,” Olese says. SuccessFactors.com is among the first to participate in the McAfee program.

The charges for McAfee Cloud Secure are based on number of IP addresses, among other factors, and start at less than $5,000 per month, according to Olesen.

Cloud providers are entitled to post the McAfee Cloud Secure mark when they’ve successfully completed daily vulnerability-assessment scans. The program is modeled to some extent after the McAfee Secure Trustmark program for e-commerce Web sites that undergo security scans.

Read more about wide area network in Network World’s Wide Area Network section.