Cloud Security: Gartner Conference Experience

I took part in Gartner Data Center Conference, held in Las Vegas, USA, in December, hoping to learn more about how corporate IT professionals think about virtualization and cloud computing through this live observation. Although I personally do not like the Las Vegas, but I still stroll around the pinball fans must visit the resort: Pinball Hall of Fame (Pinball Hall of Fame). From the point of view of information security, Gartner analysts and attendees have given me some insights into cloud computing. Virtualization is full of course numbers for VMware, and most of the courses on virtualization and storage exchange networks are surging. A key point in the course of virtualization security is the lack of contact between the IT staff responsible for applications and storage and the IT staff responsible for information security. The virtualization train is moving ahead at full speed, but the information security team is chasing after them, trying to study the security implications of virtualization. The old boundary security model is being challenged because through VMotion technology, applications can move freely in VMware environments (be careful not to accidentally drop some sensitive applications into the DMZ area). Impact on information security: You'd better be careful about architecting your virtualization datacenter and consider using VLANs and distributed virtual switches (distributed). Private cloud computing is an enterprise's short-term response: the CEO's request is: "Use the cloud to reduce costs", and the CIO's response is: "Yes, we are already doing, that is the so-called private cloud." At Gartner's event, the focus of vendors and Gartner analysts is mostly on private cloud computing. For the so-called private cloud, everyone seems to have their own set of definitions, whether marketers or corporate IT personnel taking advantage of cloud computing concepts. Some of the orthodox clouds may be uneasy about this, but corporate IT and manufacturers are rushing through the concept of "private cloud" to catch up with the cloud computing train. The overall trend I saw at Gartner Data Center conference was a positive virtualization datacenter, but if you tell someone, "We already have our own private cloud," that makes your business sound more advanced. The coolest apps for storing public clouds are Saas/paas/iaas, General Tepco's Matthew Merchant, in a speech called "Cloud Storage @ GE" (GE's cloud storage). GE has developed a store that is stored through a public cloud (Amazon AWS, for example) The application to be backed up. It sounds cool that public clouds have reduced their backup costs by 40% to 60%. Impact on information security: Remember to encrypt data to meet compliance requirements. Corporate resilience and disaster recovery in the public cloud: a course by John morency of Gartner called "Building resiliency via colocation and the Cloud" (through the proximity and the cloud to build resilience), Discusses the backup transfer point for hot backup (warm redeemed) or cold redeemed disaster recovery (DR) using the public cloud. Morency has a sobering remark: "By the Year 2014, 15% of large companies will combine private infrastructure with public cloud services to improve resilience and sustainability." "DR is a very suitable application for public cloud computing, with the benefit of reducing costs and increasing resilience." Impact on information security: Companies should consider using a solution like trend technology Deep 7.0 to protect cloud servers (sorry, the old king is selling melons). Testing and Development Cloud: I've heard it in the past Gartner analysts say that Cloud is a good platform for testing and developing applications, but these test and development environments use real and protected data. When I discussed the cloud with the information security clients of trend technology, the answer they used was: "We're not using it." But if you ask if any of the application developers will go directly to Amazon EC2, the information security staff will be reluctant to nod. Impact on information security: the Test and development environment in the cloud, if used to real data, perhaps should take some protective measures. Information in the Cloud: Cameron Haight and Milind Govekar's speech "Cloud Computing management-making throaty mountains aren't ' t hiding in the Mist" (Cloud Computing management: Ensuring that there are no hidden mountains in the clouds: "Cloud computing is not the death knell of it; it is, in fact, an opportunity to perk up the IT service provisioning role by appropriately updating processes, tools, and organizational structures." "This is particularly true in the area of information security, because no one, except the enterprise itself, is careful to take care of the important assets of the enterprise." "Editorial recommendations" cloud computing is how to invade the unified communications field of RSA CTO Analytics Cloud Security is a basic service Architecture "executive Editor: Faya TEL: (010) 68476606" Original: Cloud Security: GarTner Conference return to network security home