Why is data center security important in the cloud?

Before explaining data center security

The concept and importance of the data center

Before talking about data center security, we must first understand the concept of data centers. A data center is a building or facility that offers server computers, network connections, and related services. Tens of thousands of server computers in data centers store vast amounts of information for browsing, shopping, and gaming. Its role is to gather and manage such information for stable operation.

Security areas of data center

First, security governance

The term “governance” has a broad and vague definition of “a way to run the government that solves problems by building networks of common interests.” However, “governance” in data center security can be described in terms of policy aspects, such as physical security, regulations, standards, education, and approval processes. In other words, it is about creating policies, management systems, and processes for security regulation to establish a solid foundation for the data center

The security policy describes an organization's security objectives, the scope of the policy, asset classification, and management, but does not explain them in detail. For example, although the policy states that “transmissions of confidential documents or sensitive data must be encrypted,” it does not mention which encryption protocol should be used. The details are laid out in separate materials, such as guides, not in the policies. In addition, the data center is audited and certified by each certification body to meet its criteria, which includes security as an essential component. This is a testament to the fact that security is essential for the safe service and facility operation of data centers.

Types of domestic/international certification examination

※ Samsung SDS data center has obtained the above seven certifications and is undergoing follow-up audits and renewals every year.

Second, infrastructure security

Data centers must ensure the safety of the server computers and networks that make up their architecture. In particular, security measures have become essential as the number of cloud environments that provide infrastructure resources, such as computers, storage, and networks, as services have increased. Among them, let's look at “network separation,” which is the most powerful method of maintaining infrastructure safety recommended by experts. Network separation is a policy and infrastructure configuration technology separating networks into the Internet and business networks without the Internet. This is a method of physically or logically separating the network so that even if hackers break into a user's PC via the Internet, they cannot access important information in the system. Although it has a simple concept, the actual implementation is not as simple since it requires collaboration between security and related departments. Yet, once it works properly, the outcome is beyond the expectation.

Third, application security

Common websites in the form of applications and mobile applications are used by a wide audience, which makes them vulnerable to quick and easy exposure to malicious code. Attacks using application vulnerabilities are occurring even at this very moment. To address these issues, enhance application security, and mitigate the spread of malicious code, the privilege bypass feature is currently under development and undergoing testing. Also, developers must carefully consider the application security types, including authentication, authorization, and encryption, when developing applications and safety through source security verification and mock hacking after completing the app development.

Conclusion: There are three important factors of data center security, the three Ps (people, process, and product).

The progress in security technology paradoxically indicates the emergence of novel forms of attack techniques. In other words, the new security technologies come from counterattacks. The following three P’s are very important to the data centers constantly exposed to hacking threats: People, Process, and Product.

People

The key to data center security is people. The personnel here includes not only security administrators but also infrastructure operators of servers and networks. For security personnel to perform their duties properly, it is essential to understand the importance of security and communicate about technical connections. It is obvious that technology alone cannot maintain security. This is why we invest time and money to educate human resources and train our employees. The continued interest of the decision maker is also crucial to keeping security.

Process

The evolving security threats, growing in sophistication, have created an environment where defense cannot rely solely on technology and solutions. Hackers will try to find and penetrate gaps the security team missed with their advanced techniques, and this is when the process reinforcement is needed. Only then can we detect gaps that technology alone cannot close or proactively defend against.

Product

To create a safe product, security is a critical factor that should not be overlooked from the beginning to the end of development. As with software tests, security must be considered from the beginning of the development life cycle, and code security flaws detected during the development must be addressed to ensure the product's reliability.

To this end, Samsung SDS reinforces security by educating people, stipulating processes, and verifying products. Since data centers are where important corporate information is concentrated, they are not always free from unpredictable threats. To keep data centers safe, careful preparation and defense are required at all times.