Cloud computing must break through network security bottleneck

In recent years, the rise of cloud computing, so that Europe and the United States began to recognize the significance of data sovereignty, the country's users of data and information should not be easily transferred by cloud services to foreign countries. However, as a new phase of computing system evolution, the advent of the cloud computing era is breaking the old industrial pattern and even the traditional way of government supervision, especially the data security problem exposed by prism door is especially worrying.

In an interview with a cloud computing service operator's data center, the data center Director pointed to a group of busy foreigners who said to reporters: "Look at this scene, do you think there is something wrong?" In charge of the explanation, the reporter quickly understand the cloud computing operations due to the lack of corresponding national standards, in the past to protect national information security for foreign enterprises and foreigners, some of the provisions of the regulations are being circumvented and breakthroughs in the transmission process, the data is partially lost to control. The data owner does not know who can see the data and whether it copies the data, and 65% of the respondents said it was the biggest drawback of cloud computing.

In some countries, for reasons of national security, a number of decrees have been enacted that are conducive to their own detriment to the safety of others ' information. If the United States has enacted the Foreign Intelligence Surveillance Act (foreignintelligencesurveillanceact) and the Patriot Act (patriotact) have deliberately bypassed the protection of legitimate data holders, Enable its intelligence agencies to arbitrarily view the data of the legitimate owner of the data. In particular, the exposure of prism door, the U.S. intelligence services to the forefront. Some media said the U.S. government will be China's network equipment giant Huawei launched more than 1 years of security investigation. The congressional committee and the Obama administration have said that, fearing that Huawei's equipment might be used by the Chinese government for espionage, the U.S. government's repeated security review of Huawei has not proved its suspicions.

Fortunately, in recent years, the Chinese government has also increased the importance of information security. In June 2012, the State Council in the issuance of "vigorously promote the development of information and ensure the security of a number of views" clearly put forward, strict government information Technology Service outsourcing security management, the government agencies to provide services to the data center, cloud computing Services platform to be located in the territory. According to the Wall Street Journal, the Chinese government agency said it would investigate three U.S. technology companies on security issues, including IBM, Storage Equipment Company, EMC, the world's leading enterprise software giant, and Oracle, the computer and services giant International business Machine Company. These companies have a market share of more than 50% per cent in China's financial sector, and their safety could bring potential risks to China's financial sector. The report also said that American technology companies dealing with the Chinese government in the coming months might encounter more similar security investigations.

Pao cloud computing experts said that the healthy development of China's cloud computing must solve the cloud computing security bottlenecks. The security of cloud computing begins with a set of national cloud standards, to specify some basic technical specifications for file transfer, storage, management, etc. secondly, to upgrade the domestic hardware and soft level, the ability to use domestic hardware and software in key departments, but not entirely dependent on imports; and to develop their own cloud management capabilities, Today's cloud computing services are 7x24 operations, more important cloud platform is directly related to user information and storage content, if only foreign companies to do service and maintenance, cloud security There are many hidden dangers.

It is reported that the Ministry of Information Services on cloud computing standards are already in place, the next two or three months is expected to be officially announced to the public to enter the stage of consultation. And Pao led the domestic cloud infrastructure provider, also launched a variety of independent intellectual property rights of the security server, security cloud storage, can gradually meet the needs of the domestic cloud computing market.