Latest cloud storage hiccups prompts data security questions

Computerworld - The pitch from providers of hosted storage services sounds enticing. Instead of what these providers call the inherent risks in using hard drives or DVDs to store data, users are better off paying a small fee and backing up data in the cloud. Cloud storage providers pledge that putting valuable data into their hands is like keeping money in a bank.

However, cloud computing vendors continue to be plagued with periodic shutdowns and losses of customer data. Just last week, cloud-based storage service provider Carbonite Inc. filed a lawsuit charging that faulty equipment from two hardware providers caused backup failures that resulted in the company losing data for 7,500 customers two years ago.

The problems have prompted some users and analysts to wonder whether cloud computing storage poses an unacceptable data security risk, particularly because users are depending on unseen infrastructures holding enormous data vaults that could easily attract the interest of hackers and electronic terrorists.

Michael Peterson, president of Strategic Research Corp., a market research firm in Santa Barbara, Calif., said he avoids using hosted storage systems because he doesn't trust them and because of the long-term costs. He noted that he used Amazon.com's S3 hosted storage service to help his son set up a business venture. But once the venture could afford to purchase its own on-site storage, it stopped using S3.

"Amazon is successful with small businesses, entrepreneurial start-ups -- people who don't want to invest in their own storage," he said.

But he said, "you're a fool if you put personally identifiable information out there. Vendors in this space have to be putting their trust message out there and try to prove it. But as a consumer, I'm not ready to trust again. And I'm a suffocated user. I've been using this stuff for years."

Peterson also noted that some customers can become confused because vendors describe cloud computing in different ways. "Everybody wants to call what they're doing cloud," Peterson said.

Nonetheless, several major vendors offer hosted storage products, including Symantec Corp. and EMC Corp., which offer the Norton Online Backup and Mozy products, respectively. A large group of small service providers offer similar products while industry giants Google Inc. and Microsoft Corp. are pursuing their own hosted storage models.

Despite the promise of using the compute cloud to store data, incidents of hosted sites going down or losing data are beginning to pile up.

For example Amazon's S3 service was offline for several hours in February, which wasn't the first time the service failed. Also, XCalibre Communications' FlexiScale service suffered an 18-hour outage last year, and The LinkUp storage service shut down in August after losing access to unspecified amounts of customer data.