2017云安全报告（英文版）_37页-2mb

CLOUD SECURITY REPORT SUMMARY

Core Content

This report explores the current state of cloud security, highlighting the growing adoption of cloud services and the associated security challenges and solutions. As organizations increasingly rely on cloud computing for its scalability, cost-efficiency, and agility, they face significant concerns regarding data protection, privacy, and compliance.

Main Findings

• Cloud Adoption Trends:

  • 90% of respondents are in some stage of cloud adoption, with 49% already operating in a live cloud environment.
  • SaaS is the most popular cloud service model (67%), followed by IaaS (50%) and PaaS (38%).
  • Email, customer data, and employee data are the most commonly stored types of corporate information in the cloud.
  • Microsoft and Amazon are the leading cloud providers.

• Cloud Security Concerns:

  • The top three security concerns are: data loss (57%), threats to data privacy (49%), and breaches of confidentiality (47%).
  • Compliance remains a major concern, with 41% of organizations perceiving higher security risks in the cloud compared to traditional IT environments.
  • Visibility into cloud infrastructure is the biggest security management headache (37%), followed by compliance (36%) and setting consistent security policies (33%).

• Cloud Security Challenges:

  • Organizations are increasingly realizing that traditional security tools are not suitable for cloud environments (78%).
  • Common challenges include compliance requirements, lack of native security in cloud apps, high costs, and fear of vendor lock-in.
  • Security slows down DevOps processes, with 37% of respondents noting that it hinders continuous development.

• Cloud Security Solutions:

  • The most effective security controls are data encryption (74%), security monitoring (57%), and penetration testing (60%).
  • Access control is the third most effective (52%).
  • Cloud security confidence is boosted by data encryption (51%), setting and enforcing security policies (49%), and creating data boundaries (41%).
  • CASB solutions are gaining traction, with 7% already deployed and 24% planning to deploy in 2017 and beyond.

• Budget Outlook:

  • 33% of organizations predict an increase in cloud security budgets over the next 12 months, with cloud security receiving the largest share of budget increases.

Key Viewpoints

• Security in the Cloud:

  • Despite the benefits of cloud computing, security remains a top concern. Organizations are seeking new tools and strategies to address these challenges.
  • The perception of SaaS security is improving, with 58% believing cloud apps are as secure or more secure than on-premises applications.

• Skills and Training:

  • 53% of organizations plan to train and certify their current IT staff to manage cloud security effectively.
  • 30% plan to partner with managed service providers (MSPs), and 27% will leverage software solutions.

• Best Practices:

  • Proactive measures such as penetration testing, security monitoring, and developer education are crucial for securing cloud applications.
  • Integration of security governance into DevOps processes is essential for maximizing cloud benefits.

Key Information

• Top Cloud Security Threats:

  • Unauthorized access (61%) is the biggest threat.
  • Account hijacking (52%), insecure APIs (43%), and external sharing of data (42%) follow closely.

• Cloud Security Budgets:

  • Cloud security is the largest area receiving budget increases, with 33% of organizations planning to increase their spending.

• Security Tools and Controls:

  • Traditional security tools are not effective in cloud environments (78%).
  • Cloud-specific security solutions are required to address the dynamic and complex nature of cloud infrastructure.

• Cloud Messaging Apps:

  • Compliance requirements (27%) are the biggest barrier to adopting cloud messaging apps, followed by inadequate native security (23%).

Methodology & Demographics

• The report is based on a survey of over 1,900 cybersecurity professionals.
• Respondents include technical executives, managers, and IT security practitioners from organizations of varying sizes and across many industries.
• The survey provides a comprehensive view of current cloud security practices and challenges.

Sponsors

• AlienVault
• Bitglass
• CloudPassage
• Cloudvisory
• Dome9 Security
• Eastwind Networks
• Evident.io
• (ISC)²
• Quest
• Skyhigh
• Tenable

Conclusion

As cloud adoption continues to grow, so do the associated security concerns. Organizations are increasingly investing in cloud security solutions, training their staff, and seeking new tools to address the unique challenges of securing cloud environments. The report emphasizes the importance of visibility, compliance, and effective security policies in the cloud, while also highlighting the role of CASB solutions and the integration of security into DevOps practices.