Cloud computing Security: disturbing

In the 2012, the popularity of cloud computing began to decrease, and the cloud began to shift from the initial stage of conceptual hype to landing and pragmatism. Cloud computing has dropped from 1th place in 2011 to today's 10th place, according to a 2012-year technology trend forecast published by Gartner, the world's authoritative it research and consultancy firm. Over the past year, only 3% of CIOs around the world have applied enterprise IT systems to cloud computing.

The fall in focus does not mean that cloud computing is no longer important, but that people are starting to look at cloud computing more sensibly. In a survey of CIO populations in the Itvalue community, 19% of companies are already deploying or applying cloud computing, and 28% of companies are considering the recent deployment of cloud computing, and 53% have no timetable for deploying cloud computing.

Why are so many CIOs still indifferent to cloud computing? A CIO who declined to be named said his view that the migration costs, implementation cycles, technology maturity, and security of existing systems migrated to cloud computing were problems that must be addressed. At the same time, he worries that cloud computing, which spends a lot of budget and energy on it, is short-lived and replaced by other new technologies.

2011, the world's major IT vendors gradually to their own cloud computing products and cloud services landing. In the discussion of the Itvalue community, CIOs have focused on a few key words: business model, security, openness and efficiency, regardless of whether they are bullish or skeptical about cloud computing and the cloud products of major vendors.

"The key to the CIO's failure to attempt cloud computing is that security issues and integration issues are not completely resolved." I think when we talk about trying cloud computing power, we should also see the resistance. "The CIO of the German Schaeffler Investment (China) Co., Precipice, is a language that most CIOs worry about cloud computing security.

A survey conducted jointly by Itvalue and Intel shows that CIOs ' concerns about the public cloud focus on security and privacy, and integration with other information systems in the enterprise. If public cloud service providers are not able to come up with effective solutions in these areas, convincing Cio,cio will be hard enough to be interested in the public cloud.

"For enterprise users who use cloud computing, the main problem is to feel uncontrolled-security issues are always worrying, the company's confidential information will be compromised, the service provider's integrity is the biggest problem, and then the network problem." "Guangdong China Xun Agriculture Co., Ltd. Information Department minister Huangshan said."

Traced in the end, cloud computing service providers and users of the information is not symmetrical, is the CIO psychologically on the security of cloud computing reasons. On the one hand, the CIO has outsourced its IT computing and services to cloud service providers for the purpose of liberating and optimizing its own IT resources, so it has little resources to fully penetrate the "cloud" details of IT services. On the other hand, cloud service providers, for their own commercial confidentiality and security considerations, cannot fully present the critical information in the cloud to the CIO.

In addition, from the current cloud computing industry environment, the Chinese government despite the cloud computing has invested a lot of money and policy support, but has not introduced cloud computing operations related laws and regulations. If the data out of the problem, but also unable to investigate the ultimate responsibility, the loss of the enterprise can not imagine.

From a technical point of view, the unknown security risks and vulnerabilities in cloud computing are like a "bomb" that can detonate at any time, making CIOs worried. A number of global cloud security threats in 2011, in addition to the event related to the huge financial losses, but also severely hit those who are ready to apply cloud computing the CIO's confidence in cloud computing security.

Fortunately, a private cloud is more conducive to the enterprise to protect and share the core digital assets of the CIO comfort, many enterprises also began to use the "cloud services + Thin Terminal" deployment method, improve the collaborative design, development and other areas of security and convenience. But not all enterprises are suitable to build private clouds, and the current cloud computing standards are still blank, the private cloud of the future once the industry standards are not compatible with, will also face the pressure of upgrading.

211 Years of cloud computing security threat milestones

March

Google Mail burst large-scale user data leaks, about 150,000 of Gmail users found their own all mail and chat records were deleted, some users found that their accounts were reset.

April 19

Sony's PlayStation Network and the Qriocity music service website were hacked. Service interruption of more than a week, PlayStation Network 77 million registered account holders of personal information stolen.

April 22

Amazon Cloud is located in the Virginia State Cloud Computing Center downtime, leading to answer services Quora, news services Reddit, HootSuite and location tracking service Foursquare and for web publishers to provide gaming tools BigDoor paralysis. The fault lasted for 4 days. is considered to be the most serious cloud-computing security incident in Amazon's history.

May 13

The Microsoft Cloud Computing Exchange Online service has failed, causing users to send messages for 3-9 hours. Microsoft's BPOs Cloud hosting suite was disrupted for 3 hours a week before Microsoft released Office365 in June 2011, and its users in North America were affected.

July 15

Google Application engine Java service failure, downtime more than 1 hours. The reason for the failure is based on cloud computing and there is a problem with the application being transferred to the network.

August 9

The Amazon cloud service failed for about an hour, affecting Netflix, Foursquare, Virgin America and several other sites.