Apples to Oranges: Understanding the Changing Attack Surface for Applications Migrated from Self- Hosted to SaaS
Why would you defend two instances of the same application differently? Self-hosted applications have the same security concerns as SaaS applications, but they cannot be protected the same way. To move a hosted application to a SaaS provider gives the illusion of offloading risk.