Five detailed cloud security

Technically, there are not many completely different aspects of security in cloud computing and other areas of computing, but the specific technologies and tactics used to deal with the Internet are different. The following article by comparing the same as the Internet application of online banking applications and more extensive cloud computing applications, on why the current users of cloud computing services to be cautious to conduct a detailed study. After that, through practical application cases, we can give a model that can be used for reference to help people to eliminate the concerns about the security of cloud computing services.

Any Internet-based applications have security issues. For example, the online banking that each of us inevitably uses in our daily life is also an application form of cloud computing. Only when the online banking appears and is widely used, Cloud Computing "concept has not been speculation so far. Although individual users and business users have some degree of concern about the security of online banking, people's daily life is still inseparable from such applications, or are actively using. To a certain extent, people are relieved to transmit money as a kind of virtual data on the Internet. But when people talk about "cloud computing," they are extremely concerned about the security of the data. Why do people think that the safety of their online banking services provided by banks can still be regarded as "cloud computing" that uses the same Internet security technology but can not comfort people worry about security?

We from the following aspects of online banking applications and other cloud computing applications to make a comparison to explore the reasons.

Security Technology: At present, the security technology in the field of computer development is very rapid, whether hardware-based or software-based, are already quite mature. We are familiar with Internet-related security technologies including many, for example, the technology used to encrypt the message transmission and user authentication, such as the use of digital encryption based on X.509 PKI and PMI system, dynamic password technology; TLS / SSL technology that encrypts the transport layer; and security technologies that prevent unlawful intrusions and attacks such as anti-virus, anti-phishing, anti-DoS, access list control, firewalls, and more. These technologies are not only widely used in online banking applications, the application of the internal IT architecture has long been quite mature, of course, will be widely used in cloud computing. Internet banking application provider, that is, banks, can use the above-mentioned sophisticated security technology to provide users with a variety of transaction services through the Internet, and to a large extent users can be assured. Similarly, cloud computing service providers can do the same.

Therefore, we do not need to worry too much about the maturity of security technologies. Only in some extreme cloud computing environment will face the challenge of new security technologies and the resulting technological advances, such as virtual technology-based ultra-large-scale computing, the computing node is dynamic (with the current most online banking Fixed server model used in the application there will be a difference), so that node switching may face a lot of security challenges. But this should not be an excuse for blocking powerful vendors from offering cloud computing services or an excuse to stop people from using cloud computing services. Because cloud computing service providers, it is not necessary to adopt the virtual computing technology based on dynamic computing nodes to meet the requirements of large-scale computing, though it is a more ideal and economical way. Traditional fixed server model can meet the requirements of large-scale computing, but also the application of existing mature security technology, so that if there is a good application, but also to meet the requirements of large-scale computing and security, why not use the traditional Server deployment as soon as possible to the cloud, to facilitate more users to buy and use, and to bring their own faster and more revenue? As far as cloud computing service users are concerned, there is no need to worry about which deployment method cloud service providers use as long as they can meet their own performance and security needs. Excuse me, who has to go to the bank before the decision to adopt online banking applications using the server deployment and security technology details?

Security Regulatory System: When using online banking applications, people rarely give in questions or are suspicious of security details in one area because people believe that banks will provide sufficiently robust security measures, including technical and regulatory systems on. People believe that within the bank, different authorized persons can access the information is strictly limited, and relatively sound management, leaving marks and auditing system, as well as laws and regulations to protect this point, the more the pool of thunder and you have to pay a very high Economic and legal costs. However, when people face a variety of cloud computing services on the Internet, they will be very concerned about security issues, because so far, there is no special regulatory authority to cloud computing providers to monitor the security nor any Laws and regulations require cloud service providers to adopt what degree of personnel management, leaving marks and audit system. So when people are considering whether to adopt cloud computing services, they pay special attention to data security issues, especially for enterprise users.

Data storage: People use online banking applications, the most critical data is the funds on their accounts, users are aware of their data is stored in bank-controlled data center, in line with local laws on privacy and security requirements and regulation , Will not be canceled, lost, or misappropriated for no other reason. The cloud environment is completely different, and since there are no national boundaries on the Internet, data may be stored in data centers anywhere in the world (even if the cloud service provider is a home-grown business, the data center it uses may be Abroad) is not subject to the laws and regulations of the country, the data stored in other countries are likely to be owned by other institutions at any time. Or in the event of an accident, the user who suffered the loss can not obtain the corresponding compensation or recovery through the domestic legal means. This is strategically unacceptable for the production data of business users.

Service Provider Survival Problem: The providers of online banking applications are basically banks. In China, the duration of a bank will not be worried by everybody. Therefore, it is not likely to worry about the money that banks themselves deposit in banks through online banking. The cloud computing service provider is vastly different, what is the nature, what size are, if the service provider closed down, then the user stored in the service provider where the data to be handled will be very tricky problem. For example, the bankruptcy of the account network that occurred in 2009 caused serious problems inaccessible to the accounting data of 200,000 registered users. Therefore, the ability to find a cloud computing service provider with long-lasting viability as a domestic bank has also become a problem that cloud computing users need to take into consideration. In order to avoid data threats due to insufficient capacity of service providers, data migration becomes a good safe haven.

Data Migration: The most critical data in online banking applications is the money in user accounts. Although other information, such as the user's name, contact information, etc., can not be delivered in online banking applications of different banks, the funds data can be passed on to each other. This is because all banks will follow a certain standard when transferring funds online. In fact, as long as the computer application, there will be data migration problems. Data standardization is the key to solving this type of problem. Applications that do not have standardized data provide at least a data transformation mechanism, and the only way to move data between applications of the same type. Currently, there are many types of cloud computing applications, such as CRM and financial management. There are many applications for the same type of applications, but few standardize such data as online banking applications. This creates difficulties in moving data from one cloud computing application to another for similar cloud computing applications. Coupled with the different applications of cloud computing and traditional applications, the traditional application of the vendor fails, the application can still run, the data is still retained in the user side; and cloud computing applications manufacturers to fail, the application certainly can not continue to run, which will be Data export to users or export to another similar applications, so that the user's business can continue to operate.