Data Theft? Five Tips for Security in The Cloud

Data Theft? Five Tips for Security in The Cloud

Services like Dropbox, Google Drive, Microsoft OneDrive, Amazon Cloud Drive, iCloud from Apple or magenta cloud Telecom have real benefits. The cloud stored data is available from any device from the smartphone to the desktop PC and from anywhere. On low storage machines, the cloud functions as an external hard drive. And it allows easy data sharing and convenient and efficient collaboration over the Internet.

But even the main disadvantages are clear: Once the data is no longer at home or at cantor locally on the computer, but in the available network, they are vulnerable and can be hacked under certain circumstances. LEAD provides the five most important tips on how Internet cloud users can better protect their data. Cloud - but of course!

Don't put all data in the cloud

Anyone who uses cloud must think carefully and arrange what data he deposited there. Music, vacation photos, and daily correspondence are usually no problems. However, very personal documents, bank statements, tax returns, passwords, confidential projects or sensitive photos, do not have a business in the cloud.

For most providers, this difference is very manageable. For example, the Apple hard drive online iCloud Drive only stores Mac "desktop" and "document" accounts in the cloud. If you create a folder outside of "Documents" such as "Not in the Cloud", you can save the book there, which should only be stored locally on the computer.

Smart passwords and two-factor authentication

Secure and smart passwords are even more important in the cloud than on local machines. At least eight numbers, letters and special characters with lowercase letters and large 15 characters with this mixture are considered optimal. If you want to know how secure your password is, you can test it on the page like (but it's a little different!). With passwords that are too simple, checks will give scary results such as "This password can be cracked in a few seconds".

Another password tip for cloud: Change every 90 days to a fixed date, and don't use passwords for cloud - or anything like that - in other Internet services or for shopping online. Because: Criminals who break passwords, then can also try to access cloud basketball. This mistake can also be made by celebrities whose data has now been lost.

Incidentally, even smartphones that are most at risk of theft must be properly secured, with face recognition, fingerprints or at least a six-digit code. Anyone who successfully enters a cellphone usually has slow access to data in the cloud.

Two-factor authentication, offered by some cloud services as an option, provides greater security. In addition to passwords, a second instance is required for login - for example, numeric code sent via SMS, or displayed by iCloud Apple slowdown through the cloud on other registered devices. Entering a password plus code, while more time consuming and uncomfortable, greatly reduces the risk of data theft.

The Cantor Federal for Information Security (BSI) recommends two-factor authentication wherever sensitive data is stored online: "This code is only valid for a short time and must be requested again for every login on a cloud server is much more difficult, because it must have access to a cellphone besides knowledge about passwords. "

Data encryption

Exchange of data from and to cloud storage is usually not encrypted. But even this loophole can be closed: If the cloud user volumes their data description, the attacker usually can't do anything even with the file taken. BSI recommends being active here: "The safest solution is to take over the encryption and decryption of data and store the key with you."

Understandable and recommended is Boxcryptor, a software for file encryption by the manufacturer Race from Augsburg. Boxcryptor works with 30 of the most popular cloud services from Dropbox via Google Drive to iCloud. The software encrypts files on the local computer, and encryption remains in the cloud. The unlimited number of cloud providers can be used for € 36 a year.

Don't forget to back up your data

Anyone who believes that the cloud also solves problems with data backup is wrong. Cloud services may fail and not available for long periods of time. And it's certain that vendors don't have backups after hardware defects - and users then stand there without their data.

Therefore, BSI warns: "In general, the reliability of cloud services is high - higher than the resilience of your own system at home. HCLFHL You cannot guarantee a hundred percent security for regular offline backups on hard drives, USB sticks or hence, CDs / DVDs must is considered normal and ensures that files remain permanently available. "Programs such as Carbon Copy Cloner, Apple's Time Machine or original Windows 10 backup store data on external hard drives regularly and automatically.

Cloud itself

Those who don't trust cloud services but don't want to let go of the benefits of cloud Internet can manage their own cloud at home. The stored data can then be retrieved from the appropriate device and from any location. With cloud houses that are well protected with strong passwords and encryption, security may be higher than with larger cloud services, and hacker attacks are not possible.

This device is not too complicated, but lay technology people still have to face a number of puzzles. The basis of personal cloud is a network hard drive that is connected by a cable to the home router. The price-performance winner in commodity testing is the Western Digital My Cloud network hard drive, which depends on available storage capacity of around 150 euros.

The clearest user interface for managing their own cloud, according to Warentest, offers Synology and Seagate network hard drives. Fritzbox router owners have a fairly easy way to get used to the home cloud. In newer models of firmware FritzOS 6.83 can be connected to a normal USB hard drive, which then functions as cloud storage. Although this solution is slower and less flexible than a private cloud with a network hard drive, it can be easily operated using the MyFritz application, for example.