Security News > 2023 > November > Decoupling for Security

We can and should get the benefits of the cloud while taking security back into our own hands.

The decoupling principle applies that idea to cloud services by making sure systems know as little as possible while doing their jobs.

Our data is in motion as we exchange traffic with cloud services such as videoconferencing servers, remote file-storage systems, and other content-delivery networks.

Our data at rest, while sometimes on individual devices, is usually stored or backed up in the cloud, governed by cloud provider services and policies.

Many services use the cloud to do extensive processing on our data, sometimes without our consent or knowledge.

You've decoupled properly if you're comfortable using cloud services that have been split across a noncolluding group of adversaries.

News URL

https://www.schneier.com/blog/archives/2023/11/decoupling-for-security.html