Observation: To count the pitfalls of several cloud computing services

HC Security Network According to a recent report released by the World Privacy Forum, if companies expect to reduce IT costs and complexity by leveraging cloud computing services, preemption should ensure that no potential privacy issues are created in the process.

Once you give the data to outsiders, you face potential problems. Businesses may often not even know where their data is stored. Information sometimes ends up in multiple places, and each place may need to comply with different privacy requirements.

The enterprise should also investigate the hosting service provider in advance to ensure that the data security and privacy measures in the cloud environment are at least as reliable as their own measures. Know what business continuity and disaster recovery measures the cloud service provider has implemented and deal with http://www.aliyun.com/zixun/ Aggregation/12242.html "> The policy of the data leakage incident is also very important.

Users who want to cut costs through cloud computing services tend to overlook such issues and need to clarify the privacy aspects of their contracts.

So is it possible for us to avoid the risk of cloud computing? In fact, any innovation can be risky, and we always find ways to reduce and eliminate risk:

(1) Control the data position. Another problem that affects the size of customers is where the data resides because different countries apply different privacy and data management laws. So this is especially important for companies that are involved in cross-border business.

The EU, for example, has strict rules on which data on the individual can be kept and kept for long. Many banking regulators also require customers ' financial data to remain in their home countries, and many compliance requirements cannot be put together with other data on a shared server or database.

Today, users may not even know where their data is in the cloud computing environment. This fact brings with it a variety of compliance issues such as data privacy, isolation, and security.

But the question of uncertain data positions is beginning to change, as Google allows customers to specify where to keep their apps data, thanks to its acquisition of an e-mail security company Postinie and, for example, the Swiss bank's request for customer data files to be kept in the Swiss country, Google can do that now.

A further step is the ability to physically isolate users ' data from other customers ' data in a multi-tenant architecture of cloud computing environments. However, this isolation technology is expected to be implemented through a virtualization technology that is still in its early stages but increasingly powerful.

(2) Data encryption. Data encryption can mitigate some of the privacy risks associated with unintentional or malicious disclosure-this encryption is for data that is stored on the server of the cloud service provider and for the end user.

In addition, the implementation of a two-factor validation scheme to control access to data stored by cloud service providers is expected to ensure that only users with access to data can see the data. Of course, if the enterprise is all in place, and has done the work beforehand, it is not much different to store the data itself or to store the data by the cloud service provider.

(3) Data loss and backup processing. Where are the data stored? Who has access to data security? This is a big problem because cloud service providers have little experience in dealing with sensitive data in the long term, apart from software and services (SOFTWAREASASERVICE,SAAS) providers.

(Responsible editor: Lu Guang)