CSA Nils Puhlmann: Is the cloud in the end safe or not safe?

&http://www.aliyun.com/zixun/aggregation/37954.html ">nbsp;

December 12, 2011 Cloud World Congress in Beijing also held, including Baidu, Super Cloud and Ufida and other domestic well-known it manufacturers participated in the meeting. At the meeting, including Beijing vice Mayor Gou Zhongwen and Super Cloud company chairman Tian and so on have made an important speech, and hope to work together with other manufacturers to promote the development of China's cloud computing industry. Nils Puhlmann, founder of CSA (Cloud Security Alliance), shared with us the things that cloud security had to consider.

▲CSA (Cloud Security Alliance) founder Nils Puhlmann

In the 2009, there were 25,000 individual products worldwide, and we suggested that security should be taken into account as technology developed. Then there are a lot of technological innovations, most of which are expensive. So we were wondering if we had any other way, that cloud computing is now in the development phase, and there's a lot of data showing that there are a lot of people in this area, such as a lot of volunteers, to help us make the cloud more secure. Our goal is to be able to guide or help our customers, and then be able to secure participation in the cloud.

In addition, there are business continuity, application security. In addition, it includes identity management and so on. All fields are completely new to Yu Yun. If we think about, now in the world, there may be different data, the integration of resources, from all over the world, security suddenly improved, how to distinguish data, how to ensure that the right people have the right access to the right data, these are becoming more and more important. Because there is no physical control of many resources now, the security of the cloud becomes particularly important.

Here is a list of the key issues that we call cloud security. First of all, for the provider of service cloud, now in the cloud world, you will find that the actual data supply point may not be well understood. For example, I am a client and I may have a deal with a cloud provider to provide services to me, but I may not know the service provided by the cloud provider, and then the data location is available. So we can see that more and more cloud services are now anonymous. Also include identity management, if you look at the development of technology, identity management. In fact, it is particularly difficult for many large enterprises. But if in the cloud world, any time, can use a lot of cloud provider's service, but also has the enterprise structure inside.

Then I have to be able to manage, that is to ensure that the right people at the right time, with the right identity to obtain this authority. So I think this is a big problem in cloud computing, which is to ensure that the right people get access to the right information with the right permissions. Moreover, we feel that the cloud will also bring about a change in the security of the entire Internet.

In fact, in terms of security, we'll see a lot of innovation coming up in the next few years. Because of the cloud, we have changed our technology, as well as the technical aspects and technical concepts. So, in particular, the entire security system has changed correspondingly.

What do we do about the Cloud trust? Some people will say that the cloud is safe and unsafe? And the cloud may be a direction for future development, but there are still many people feel that the cloud is a lack of standards, that is, in terms of development direction. For example, I do not know where the data is being stored, or whether some of the cloud is available, in line with local government requirements, industry standards. In addition, there is a question about transparency, such as whether I really know all the information from the cloud provider to manage the company's risks. If you say that there is something in the contract that is not written and I want to know, what then?

So, on some of the key issues of the future, there is a lack of global compatibility legislation, and now we have so many suppliers that they may have data centers in every country in the world, not just the way the cloud is going to do it, but there are a lot of types. If it's a bank, you may want to use this cloud, you need to put data in the Swiss cloud, and finally, if you encounter a less effective infrastructure around the world, there is no way to take advantage of the cloud, we should become more flexible, to some extent, reduce costs. For the Government, more cooperation is needed to create some globally recognized data and common standards of government privacy.

And there is the uniformity of policy, how we can be in different data levels, and then in different server data processing, and then change. We believe that in the world 10IT Enterprises will have 4 in the future, that is, 2012 years does not exist. We think that in the area of security, this is a bigger change because this kind of change is a bigger change than we've seen before.

Finally, we also use a model in the CSA, not imagine what to get in the CSA, but what to contribute, we really want to become an international organization, so as to better help cloud computing, thank you!

(Responsible editor: Liu Fen)