Cloud services tested for security

2020/05/08 - Security aspects are the focus of our comparative tests. According to the Bitkom “Cloud-Monitor 2019”, GDPR conforming data protection as well as a transparent security architecture are the most important criteria when selecting a cloud service. The tests were carried out in four different categories, in each of which 20 or 30 points could be achieved, with a maximum of 100 points. All tests were carried out in a passive and non intrusive way.

The category "authentication" (max. 30 points) analyzes the security of the authentication. We test whether a web app sufficiently protects against brute force attacks, whether a secure password reset is implemented and whether there is a 2-factor authentication. The category "integrity" (max. 30 points) evaluates authorization mechanisms. For example, it checks whether an attacker can use insecure session IDs for attacks or intercept or manipulate session cookies. The category "securing the data flow" (max. 20 points) scores points for services using secure encryption mechanisms as well as secure server certificates and only transfer the data in encrypted format. In the last category "web page protection" (max. 20 points) we check whether the web application transmits secure headers to the client not disclosing valuable information to attackers. Consequently, the candidates can obtain a maximum of 100 points.

In the Business Test, we compared Dropbox Business, Google G Suite, IONOS HiDrive, Microsoft 365 Business Basic and Telekom MagentaCloud XL. The overall winner is Microsoft Business Basic with 95 points. Besides one TByte of cloud storage, the service offers the web versions of Outlook, Word, Excel, PowerPoint, Teams as well as OneNote, email hosting and other functions. IONOS HiDrive achieved the second place overall with 94 points. Google G Suite follows in third place with 91 points, followed by Telekom MagentaCloud XL with 87 points and Dropbox Business with 83 points.

In the Test for Private Usage, Apple iCloud, Dropbox, Google Drive, Microsoft OneDrive and Telekom MagentaCloud were compared as the most widely used services in Germany. The overall winner is Google Drive with 91 points, convincing with its easy handling and large free memory. Microsoft OneDrive follows in second place with 90 points. Telekom MagentaCloud takes the third place with 87 points, followed by Dropbox with 83 points and Apple iCloud with 82 points.

Hakan Ekmen, CEO Telecommunication at umlaut, says: ”The advantages and strengths of digital communication are evident in the current situation. The data security plays an important role for the end customer. Our methodology shows to the end customer the security status of the products. They benefit from our more than 20 years of experience in the analysis and evaluation of digital infrastructures.”

The special magazines PCgo and PC Magazin will report on the detailed test results in issue 6/20, which will be published today.

Please read the full German articles below.