Trend Labs - Is your organization ready for Cloud?

Trend Labs has created a Cloud Security blog and highlights key concerns for corporate users as noted below:

Trend Labs - Is your organization ready for Cloud?
http://blog.trendmicro.com/is-your-organization-ready-for-the-cloud/

Trend Labs - Cloud Security Blog
http://cloudsecurity.trendmicro.com/

QUOTE: Cloud computing is one of the biggest trends in the computing world today. However, security concerns about the cloud make up one of the major reasons why companies are hesitant to migrate their operations to the cloud. Let’s discuss an important puzzle in cloud computing, that is, the problem of authentication.  Many authentication schemes are done via the traditional user name-password combination. Problems with relying on these are well-known but, as companies move to the cloud, these become even more important.

Cybercriminals have known the importance of user credentials for a long time now and have worked hard to develop techniques to steal them. The top 2 online banking Trojan families in recent history—ZeuS and SpyEye—both employ a wide range of techniques to steal user credentials. One of the most ingenious of these is the use of screenshots to counter on-screen keyboard safety measures online banks use as an anti-keylogging mechanism.

Saying that ZeuS and SpyEye are scary would be an understatement. Corporations should worry about two particular things—first, any website can be targeted, including those that provide confidential services in the cloud and second, even login pages protected by SSL are not safe. To make matters worse, account-stealing Trojans account for the majority of malware types Trend Micro has discovered so far.