Showing posts with label cloud_storage. Show all posts
Showing posts with label cloud_storage. Show all posts

Friday, 17 May 2019

Your most sensitive data is likely exposed online. These people try to find it

a post by Laura Hautala for C|net [via ResearchBuzz: Firehose with grateful thanks]

Don’t worry. They want it to be safe.

Justin Paine sits in a pub in Oakland, California, searching the internet for your most sensitive data. It doesn't take him long to find a promising lead.

On his laptop, he opens Shodan, a searchable index of cloud servers and other internet-connected devices. Then he types the keyword "Kibana," which reveals more than 15,000 databases stored online. Paine starts digging through the results, a plate of chicken tenders and fries growing cold next to him.

"This one's from Russia. This one's from China," Paine said. "This one is just wide open."

From there, Paine can sift through each database and check its contents. One database appears to have information about hotel room service. If he keeps looking deeper, he might find credit card or passport numbers. That isn't far-fetched. In the past, he's found databases containing patient information from drug addiction treatment centers, as well as library borrowing records and online gambling transactions.

Continue reading


Tuesday, 2 October 2012

Cloud computing – new ICO guidance

via Panopticon Blog by Anya Proops

Cloud computing is becoming an ever more pervasive feature of the technological world. Whether one is dabbling in social networking or purchasing goods online, the truth is that we all, to a greater or lesser extent, now have our heads in the virtual clouds. However, the use of cloud computing inevitably raises important information law issues, particularly in terms of the impact on privacy rights and also under the Data Protection Act 1998. So far as the DPA is concerned, issues which fall to be considered include:
  • who actually controls the data which is being processed via the cloud (i.e. who is liable under the DPA if things go wrong in data protection terms)
  • what steps a data controller may be required to take to safeguard against misuses of personal data within the cloud
  • the security implications of processing personal data through cloud computing and, in particular, whether the processing of data via the cloud is compliant with the seventh data protection principle
  • the legality of using clouds which operate transnationally and, hence, which may bring into play the application of the eighth data protection principle on cross-border data transfers
Importantly, the Information Commissioner has today [27 September] issued guidance which is designed to help organisations navigate their way through the potentially complex DPA issues which may arise in the context of cloud computing. You can find the guidance here.

Continue reading Anya’s post here


Monday, 26 March 2012

Lost in the Cloud: Research Library Collections and Community in the Digital Age

an article by Dan Hazen (Associate Librarian for Collection Development, Harvard University, Cambridge, Massachusetts) published in Library Resources & Technical Services Volume 55(Number 4 (October 2011)

Abstract

Digital technologies, renewed attention to the purposes of higher education, and changing models for scholarship and learning challenge our historic understandings of research libraries and their collections. Common assumptions and goals are giving way to diverse local agendas, many of which also reflect increasingly limited budgets. Cooperative ventures are taking new forms as well, with straitened resources again the rule. Our adaptation to this uncertain environment requires research libraries to reconsider the elements that are now necessary for success.

Hazel’s comment:
I read this article in the hard copy at the British Library, and then, rather than copy-type the abstract, tried finding it online together with the author affiliation(s).
I hit the jackpot! 
A couple of very favourable article reviews and then, joy of joys, a PDF of the whole thing.
Before doing anything other than reading the piece please note the copyright conditions:
Copyright of Library Resources & Technical Services is the property of American Library Association and its content may not be copied or emailed to multiple sites or posted to a listserv without the copyright holder’s express written permission. However, users may print, download, or email articles for individual use.

Read it here


Wednesday, 12 October 2011

Preserving Records in the Cloud

an article by Jan Askhoj, Shigeo Sugimoto and Mitsuharu Nagamori (University of Tsukuba) published in Records Management Journal Volume 21 Issue 3 (2011)

Abstract

Purpose
The purpose of this paper is to examine the characteristics of managing records in a cloud computing environment and compare these with existing archiving models, exemplified by the OAIS reference model.
Design/methodology/approach
We compare the functional entities in OAIS with a layered model of cloud computing, in which services are abstracted and shared between layers. We conclude that there are a number of areas where OAIS does not integrate well with cloud computing systems.
Findings
Based on our findings, we define a new layered model for a cloud archiving system using the concepts and information types from the OAIS reference model. The proposed model allows the sharing of functionality and information objects by making them available as services to higher layers. The model covers the entire document lifecycle, making archive functionality such as preservation planning possible at an early stage and helping to simplify records transfer.
Research limitations/implications
We believe that our model provides a simple, OAIS compatible approach to representing how digital objects and necessary metadata can be transferred from content creation systems to archives systems.
Originality/value
Whereas a lot of research has been done on the technical aspects of cloud storage, there is a lack of focus on how to comprehensively integrate records transfer and preservation in cloud systems.