How to improve data security during the migration of cloud environment

Cloud computing yesterday

The two years of the heated cloud computing is not something new in nature, as early as the 90 's in the last century, the idea of grid computing, consider the full use of idle CPU resources, build parallel distributed computing. (Only this "martyr" has now been acquired by a company that is a traditional middleware.) And in 1999, a scientific experiment to search for extraterrestrial civilizations using a global networked computer SETI@home successfully implemented the idea of grid computing and built a small cloud environment through a traditional IP network. When a user participates in a SETI@home project, the relevant information in their computer, such as the processor model, the size of the memory, etc., is SETI@home recorded to determine what computing tasks are best suited to the computer.

From an application perspective, online messaging services, search engines, instant messaging, online movies and other widely known online software-service software can be viewed as some form of cloud service.

As a result, cloud computing today is simply deploying the core-critical, enterprise-level applications of various SaaS application architectures that have not been core, individual users, to achieve the benefits of centralized deployment, such as increasing resource utilization, saving energy and reducing emissions, and so on.

The migration of traditional IT architectures cloud architectures is very similar to the development of power systems. Since Edison invented the light bulb, it has been insisting on the use of direct current electricity transmission power (because the direct current transmission distance can not exceed 1 kilometers, this requires many small power supply system, and Edison's electric lighting company is to provide such power supply), this large range, Small-scale power systems are exactly what equipment suppliers would like to see, and the great Nikola's invention of alternating current can achieve large-scale centralized power supply, and the huge changes in the Pay-as-you-go model make it possible to use electricity in areas without economic power to build small-scale power systems.

But the two sides of everything are perfectly applicable. A centralized operation (or power supply) pattern poses more serious problems for both security and usability:

Security issues: Applying a public facility means opening an additional portal, which may make security policies that are easy to implement in traditional architectures to be risky in the cloud. The application of public computing and storage resources means that part of the data is submitted to a location that is not in the control of itself, and you cannot ensure that the information is copied and stolen without authorization.

Usability Issues: Availability levels that are inherently manageable, including response time, service online time, and so on, may not necessarily be fully guaranteed in a cloud service. While most cloud providers offer gorgeous service levelsCommitment (SLA), but after the above risk incident, it is feared that few users will fully believe in it. In addition, the Chimney-style architecture (a stand-alone system relative to the cloud architecture) can achieve complete physical level of fault isolation, which is unimaginable in a cloud environment. In other words, your system may be affected by other system failures.

(Responsible editor: The good of the Legacy)