The views of enterprise IT professionals on virtualization and cloud computing

The Gartner Data Center Conference (Datacenter Conference) was held in Las Vegas, USA, in December 09, and Enterprise IT professionals made their own views on virtualization and cloud computing. From the point of view of information security, Gartner analysts and attendees have given me some insights into cloud computing. 1. Virtualization is justified: VMware's curriculum is full, and most of the courses on virtualization and storage exchange networks are surging. For the course on virtualization security, one focus is on the lack of contact between the IT staff responsible for application and storage and the IT staff responsible for information security. The virtualization train is moving ahead at full speed, but the information security team is chasing after them, trying to study the security implications of virtualization. The old boundary security model is being challenged because, through VMotion technology, applications can move freely in VMware environments. Impact on information security: You'd better be careful about architecting your virtualized datacenter and consider using VLANs and distributed virtual switches (distributed). 2. Private cloud is the short-term revenue of enterprises: the CEO's request is: "Use cloud computing to reduce costs," and the CIO's response is: "Yes, we are already doing, that is the so-called private cloud." At Gartner's event, the focus of vendors and Gartner analysts is mostly on the private cloud. For the so-called private cloud, everyone seems to have their own set of definitions, whether marketers or corporate IT personnel taking advantage of cloud computing concepts. Some of the orthodox clouds may be uneasy about this, but corporate IT and manufacturers are rushing through the concept of "private cloud" to catch up with the cloud. The overall trend seen at Gartner Data Center conference is an aggressively virtualized datacenter, but if you tell someone, "We already have our own private cloud," that makes your business sound more advanced. 3. Storage Public Cloud: Saas/paas/iaas's coolest application is the general Tepco Company's Matthew Merchant (CTO) in its speech called "Cloud Storage ge" (GE's cloud storage). GE internally developed an application that backs up through public cloud storage, such as Amazon AWS. The public cloud has reduced their backup costs by 40% to 60%, which sounds cool. Impact on information security: Remember to encrypt data to meet compliance requirements. 4. Corporate resilience and disaster recovery public Cloud: Gartner John morency A course called "Building Resiliency via colocation and the Cloud" to discuss the use of cloud computing as a "hot standby" (Warm redeemed) or "cold Standby." (Cold redeemed) A backup of disaster recovery (DR) is transferred to a stronghold. Morency has a sobering remark: "By the Year 2014, 15% of large companies will combine private infrastructure with public cloud services to improve resilience and sustainability." "DR is a very suitable application for public cloud computing, with the benefit of reducing costs and increasing resilience." Impact on information security: Companies should consider using solutions like trend technology Deep 7.0 to protect cloud computing servers. 5, testing and development cloud: I've heard it in the past Gartner analysts say that Cloud is a good platform for testing and developing applications, but these test and development environments use real and must-protect data. When I discuss "cloud" with some companies, their usual answer is: "We are not using." But if you ask if any of the application developers are going to go directly to Amazon EC2, these people will be reluctant to nod. Impact on information security: the Test and development environment in cloud computing, if you use real data, you might want to take some protection. 6, information in the cloud: Cameron Haight and Milind Govekar's speech "Cloud Computing management-making throaty mountains aren't ' t hiding in the Mist" ( Cloud computing management: ensuring that there are no hidden mountains in the cloud: "Cloud computing is not the death knell of it; it is, in fact, an opportunity to perk up the IT service provisioning role by appropriately updating processes, tools, and organizational structures." "This is particularly true in the area of information security, because no one, except the enterprise itself, is careful to take care of the important assets of the enterprise."