Cloud is a key-management pain: NIST
Grazed from The Register. Author: Richard Chirgwin.
The ISA’s National Institute of Standards and Technology (NIST) – recently accused of collaborating with the NSA to weaken security standards – has put together a paper highlighting the key-management challenge posed by cloud computing platforms.
As readers will know, key multiplication (and therefore management) can be headache-making even in in-house IT environments. Just one service, SSH, was criticised by its creator earlier this year for spreading 1unwanted keys far and wide. The paper, Cryptographic Key Management Issues & Challenges in Cloud Services, would be available at http://www.nvlpubs.nist.gov/nistpubs/ir/2013/NIST.IR.7956.pdf if it were not for the fact NIST’s site has been DOSed by the US government shut down. The Reg has popped it into Dropbox here as a PDF. (See – we don’t need no lousy government, do we?)…
SAP may build a second data center in Australia in order to meet customer demand for locally delivered cloud services in the wake of revelations over the National Security Agency’s Prism surveillance program. "When I talk to the public sector . . . it’s clear they will only consume cloud if we can guarantee their data stays here in Australia. And we are ready for that," co-CEO Jim Hagemann Snabe told the Australian Financial Review in a report published Monday.
CompTIA is expanding on its existing cloud certification program launched two years ago with a new Cloud+ designation. The association, which offers a growing number of vendor-agnostic certification exams to its members, collaborated with ITpreneurs two years ago on the CompTIA Cloud Essentials exam.
With its online retail business growing, Amazon.com will hire 70,000 seasonal workers in the fourth quarter to help it fulfill holiday orders, an increase of 40% or 20,000 workers over last year. The announcement comes as something of a jolt. How can hiring on such a massive scale be going on in a limping economy? The federal government is laying off two-thirds of its employees due to the stand-off over funding bills in Congress. Will your former IRS auditor be fulfilling your holiday purchases this year?
Dovetail Software, a leading provider of SaaS HR Help Desk and Case Management solutions, today announced its latest release of Dovetail Employee Engagement Suite. Dovetail Employee Engagement Suite 8, including over 50 new features and improvements, is Dovetail’s largest, most advanced release to date in terms of features, technology, architecture, and new operations capabilities.
Apache CloudStack, software for creating and managing private cloud infrastructures and IaaS generally, is now in its second release — 4.2 — since becoming an Apache Software Foundation (ASF) project. Formerly a Citrix product, CloudStack was open-sourced and then donated to the ASF, where it became an ASF Top-Level Project — a mark of ASF prestige — in March. Citrix still offers Apache CloudStack as part of its commercial CloudPlatform product, but one can always download CloudStack itself and use that for free.
The Amazon Web Services content delivery network CloudFront wants to give its subscribers a way to present a more meaningful message than "server not found" when their users encounter a bad link. CloudFront now lets subscribers customize the infamous 404 message so people trying to visit their business site won’t be left with the baffling dead end that "server-not-found" messages so often represent.
Aruba Networks is launching a cloud-based Wi-Fi management offering, including Aruba Central, its cloud management system. So how does Aruba stack up against Aerohive, Airtight and Cisco Meraki on the cloud front? So far, I’m intrigued but not impressed.