Cloud security problem can crack firewall not foolproof

Cloud computing's next key direction for IT development has been largely confirmed as the number of questions about cloud computing has become less and weaker. Cloud computing is so efficient, it is changing the entire IT industry, but security issues have always plagued the cloud. Cloud computing services own security risks with the application of the deepening gradually exposed. John Pescatore, chief security analyst at Gartner Consulting, said the cloud computing approach did not initially consider security design. This is tantamount to saying that cloud computing is inherently unsafe. Is it true that the security of cloud computing is inherently and cannot be changed? The answer is no. Private cloud can crack the cloud's security dilemma at the root, the private cloud exists within the firewall and can itself avoid many security problems. A private cloud allows you to control your data, for example, who can access, where to store, and how to be moved. Organizations that deal with privacy data, such as financial services, health services and government agencies, are unlikely to give third parties access to their sensitive data, and if they do, they may even have a legal presence. John Merchant, assistant vice president of Hartford Financial Services, recently pointed out that "as a company on the Global Fortune 500 list, we are strictly managing the data and we are conservative in data storage." It is difficult for any insurance company or financial services company to transfer any bit of data to a public cloud. "This view is widely accepted by businesses and government agencies. The public cloud does not address the security and privacy needs of data-sensitive organizations. Instead private clouds provide these institutions with the means to transform current data center investments, while private clouds can provide higher scalability and friendlier user patterns while maintaining control over private data. Of course, just put in the firewall does not solve all the security problems, we have to start from a number of other aspects, to perfect crack security problems. In the author's opinion, at least from the following aspects: 1. Take security into account from day one even the private cloud provides the necessary security for the cloud, providing secure isolation that is not fundamentally different in the private cloud and in the public cloud environment. All need to establish a full sense of security from the first day, taking into account possible security issues and protective measures. 2. Keep everything in the log analysis shows that more than 90% of the attacks on the enterprise can be reflected in the log data, but less than 5% of companies monitor the data that is usually sufficient to detect various attacks. "Implementing log management is important to everyone, especially in your data center," said Raffael Marty, founder and chief operating officer of Loggly, a cloud-based log management company. You have to manage the logs of things that have happened, not just to comply with SLAs (Service level agreement), but also for security. "3. NoJust computing to be scalable, security also has to be scalable cloud providers have to provide the appropriate scalability to better protect their resources. But at the same time, we need to build effective, scalable protection. With the inherent security advantages of the private cloud, combined with some other security considerations to form a reasonable security solution, cloud computing security problems will be able to be cracked. "Editorial recommendation" Analysis of cloud security hype or practical Bohu Trojan tried to hinder the cloud security technology in antivirus products Jinshan network open cloud security platform and Baidu proud tour, such as to reach the RSA conference: "Cloud Security" "Data center protection" much attention to the editor: Shang Micro TEL: (010) 68476606 "Original: Cloud security problem can be cracked firewall not foolproof return to network security home