Monday, November 12, 2012

Cryptography attack: side-channel cloud threat is all nerd and no knickers

Side-channel attacks are nothing new. Their arrival in the cloud, or rather the potential for a side-channel approach to touch the cloud threat surface, most certainly is though; but is it something you need to worry about?

Image source: Article
In order to answer that, you first have to get your head around what a side-channel attack actually is.

Is the cloud safe from side-channel attacks on crypto keys in a real world scenario or not? Good question. The researchers suggest that there is room for a potential breach within the imperfect isolation of VMs found in public clouds, and advise that 'highly sensitive workloads' should not be stored there.

Without spoiling the article, side channel attacks could threaten cloud security in a big way. It's best to be prepared. Read the article to start getting prepared.

No comments: