Posts

Showing posts with the label Threat Modelling

Application Security in Cloud

Cloud is the no more a new buzz, and slowly the world is moving towards cloud to save cost and transfer ownership of their own infra challenges to cloud vendors. There are many considerations for cloud and which model to follow completely depends on requirements and vision of an organizations moving to cloud. While cost plays a major role, still security challenges will still be in place when cloud is considered for the applications. There may be a case when applications are still developed in house and hosting happens on cloud as production. It is very important to simulate cloud security considerations when development of applications is in process. In many cases, development environment may not be more secure compared to production as it is required for testing, however this could also pose challenge as to make application fast and scalable, some security points may be left. In order to ensure cloud applications are secure enough for business purpose, few points are me