
While both companies and industry analysts have pointed to cloud services as a way to simplify IT management, such a move is not without its complications, note experts.

Web services bring new data management headaches
V3.co.uk, 11 Nov 2009

While both companies and industry analysts have pointed to cloud services as a way to simplify IT management, such a move is not without its complications, note experts.
VeriSign vice president of authentication Kerry Loftus told V3.co.uk that her company has noticed that vendors, consumers and enterprises are all feeling the growing pains of cloud migration.
Among the biggest problems is identity management. As companies move to new services, more and more login credentials must be created both for each service and each individual user. The result is an unprecedented jumble of credentials to manage.
"The matter of user name and password has gotten much more complicated," Loftus said.
"It used to be you would get a Windows login and a password, and you would have access to everything, but now even within VeriSign I probably have access to seven or more SaaS apps."
One solution that has been offered by vendors has been the "single sign-on" programme. Vendors such as Amazon, Facebook and Google have made efforts to introduce services that allow for a single set of credentials to work on multiple sites.
However, the single sign-on model has a major security weakness. When multiple sites use the same credentials, a breach at one business can be disastrous for the entire network.
"The value of that username and password is even larger than it was before," said Loftus.
"The weakest link in the chain can open up the biggest can of worms and potentially create complications that we have not seen in the past."
Loftus said that some vendors have sought to beef up security with two-factor systems, such as key fobs or mobile phone applications that randomly generate a new passcode each time a user logs in.
While early trials of such systems have been promising, Loftus estimates that such programmes are only in use by some five per cent of users, leaving the technology well within its "early adopter" phase.
Visit our dedicated Summit web site for more breaking news, views, analysis and video on the topic of Information Overload.

Alcatel-Lucent's Neal Tilley talks about how enterprises and carriers can take the strain
Former Information Commissioner speaks out on government databases and data privacy
Open Text chief predicts more consolidation in ECM market

This week we cover the continuing controversy surrounding the Orange T-Mobile deal

Using managed services to protect mobile data users from the latest security threats
Counting the cost of data security: the benefits of secured mobile services

Shifting Disaster Recovery targets with SharePoint and SQL server configurations
Using a hostbased recovery system for mission-critical systems
Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.

Replacement warning functioning normally, claims software giant

Annual initiative warns of phishing, ID theft and social network...
Do you agree?
Have your say on this article