Cloud era: The security of personal information is too much controversial

The popularity of smartphones and the development of mobile interconnection have allowed more and more users to put interactive social, business banking or entertainment on the mobile platform. The emerging cloud computing, cloud services is a strong advocate for users to upload personal data to the network server for storage, backup, to facilitate users to use different types of Internet terminals for anytime and anywhere access.

Cloud computing is providing unprecedented convenience and speed to our lives, but at the same time the new security threats seem to be--20csdn Web site more than 6 million user database leaks; Then, Renren, mop and so on some of the site user database is also uploaded to the Internet for users to download; Tianya 40 million user password all leaked ...

Recently, the world's leading accounting firm Ernst and the report said that its survey of more than 1700 companies in 52 countries around the world, 72% of respondents believe that the current level of information security risk is rising as a result of increased external threats, And many mobile interconnection applications with cloud computing characteristics play the role of pushing hands. Does this mean that if we want to enjoy cloud services, we need to ignore the safety of personal information?

Excessive collection of personal information in the cloud era

Middle, received inexplicable spam message, a buy a house, will endure years of intermediary nuisance, inexplicably, will receive not masked "friend" call for help ... This story, people are not listening to some familiar, the experience of being harassed as a result of the disclosure of personal information may have been met, but if you are using a smartphone and have a passion for mobile internet apps with a "cloud" banner, the frequency of this story will probably rise further.

This is absolutely not alarmist, and in March this year, Facebook, Twitter, Yelp, Apple, Foursquare and 13 other social media companies were prosecuted, accusing the companies of providing mobile apps that violated user privacy. The enthusiasm for collecting personal information from companies with High-tech banners and free cloud services has never stopped.

"The key reason is that the user's personal information is the profit of these companies, take Google, it is the largest Internet advertising service provider, and to its advertisers to prove its value as a platform, Google must collect as much as possible the user's personal information, including the user's name, sex, age, telephone number, Occupations, income and other factors, not only that, the user in the virtual cyberspace left action or thinking traces, such as love and marriage status, education background, hobbies, consumption preferences and buying habits are the internet company's cash cow, because only the first to collect this information, data analysis and data mining, These ISPs will be able to provide advertisers with accurate advertising guidance, so as to make a big deal. Yang Qun, chief analyst at the War on national policy.

But it is this commercial interest that drives let Internet service enterprises in the collection of user personal information has shown an excessive tendency, in addition to Yang Qun mentioned above personal information category, to micro-bo, street, popular comments as the representative of mobile social applications in recent years, the use of GPS positioning technology to widely collect users of real-time location information Taobao, Pat, have AH and so on the online mall is naturally stored a large number of users of the bank account information; Rice chat, micro-letter, MO, such as mobile phone address book based on real-time communication software is to allow users in real life of friends and relatives of the telephone number, e-mail address all floated on the "cloud" end ... Although all kinds of applications will be "informed" by the relevant terms of service before the information is collected, it is a matter of concern that the sea quantifies the collection of user information.

Cloud security is not just a technical issue

How to access personal information is not important, it is important to use the information obtained, or how the use of information to produce results. In this respect, however, it is clearly not enough to rely solely on the enterprise's self-awareness, and even if they commit and do comply with the confidentiality agreement, it does not mean that they have the ability to secure the user's personal information.

Last year, the Sony game's PS3 battle server was hacked, tens of millions of users of the credit card information is enough to ring the alarm bell, and the recent China Telecom's server has been hacked although the last proved to be a false alarm, but also caused the people's concern--the efficiency of the Internet in the cloud era we can not refuse, But when the vast amount of personal information is collected, will it be abused and is there adequate safety protection?

"Whether it is the current Internet, or the future of the next generation of internet based on IPV6 technology, security issues are a matter of keeping pace with the times, no one dare say that can provide absolute protection." "The openness of the Internet determines the breadth of its innovation, but it also provides more loopholes for those who have ulterior motives," said Liu Do, dean of the Ministry's Telecommunications Institute.

Wave Electronic information company President Wang Endong bluntly, the cloud Era security problem is not a simple technical problem. "For example, banks will also be robbed, but why people are still willing to put money in the bank, because hundreds of of years of laws and regulations and the banking industry's own security construction of the whole code up, so people have confidence." ”