340 Essentials of Cloud Computing
Backup: The SaaS vendor needs to ensure that all sensitive enterprise data
are regularly backed up to facilitate quick recovery in case of disasters. Also,
the use of strong encryption schemes to protect the backup data is recom-
mended to prevent accidental leakage of sensitive information. In the case of
cloud vendors such as Amazon, the data at rest in S3 are not encrypted by
default. The users need to separately encrypt their data and backups so that
it cannot be accessed or tampered with by unauthorized parties.
Identity management (IdM) and sign-on process: IdM deals with identifying indi-
viduals in a system and controlling the access to the resources in that system
by placing restrictions on the established ...