OWASP Cloud Top 10 Risks

The OWASP Cloud Top 10 risks are described in the following sections.

R2. Accountability & Data Risk

More and more, enterprises are moving away from company-owned data centers and servers. If your data is in the cloud, then know who has access to the data and where the data is stored. Companies outside of the United States are now asking for cloud storage somewhere besides the United States because they are worried the NSA might be spying on them. Companies in the United States don’t want their data stored in European data centers because they don’t want to be subject to EU data protection laws.

R2. User Identity Federation

Use Security Assertion Markup Language (SAML) between different cloud providers for a better ...

Get Bulletproof Android™: Practical Advice for Building Secure Apps now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.