Qin: Beware of the "boost" of cloud security in China

The British Standards Association recently after several rounds of deliberation, and finally announced that Ali Cloud Computing Co., Ltd. won the world's first Zhang Security international Gold medal, this is BSI to the global cloud service provider issued the first gold medal.

There are several points to the news. One is the authority of authentication. The British Standards Association is a world-leading Business standard service organization, founded in 1901, and in 1929 received the Royal Concession to become the world's first national standards body. At the same time, as one of the founding members of the International Organization for Standardization, BSI created the world's most trustworthy and widely recognized ISO series management system. and BSI jointly launched the Cloud Security International certification of Cloud Security Alliance, is a non-profit organization, following the BSI standards, the industry has been widely recognized.

The second is the uniqueness of the gold medal. In addition to Aliyun won the gold medal, only two foreign companies such as Hewlett-Packard received the silver Medal of the International certification of cloud security.

The third is the credibility of security. In the Internet technology field, due to the late start and other reasons, China has long lagged behind the United States and other developed countries. For cloud computing, which is still at the primary stage of development, Aliyun seems to have grasped the chance to overtake the curve and win the first opportunity. Alibaba Group vice president and Deputy Chief technical officer said the real value of gold is to let more users trust and dare to try cloud computing services. The logic here seems to be authenticated by BSI, which is worthy of user trust.

Four is the importance of business. In China, Aliyun not only provides high elasticity and low cost cloud computing services for hundreds of thousands of small and medium-sized websites, but also provides a strong, stable and secure cloud computing service to the electric business, finance and government users.

Based on the above, the author believes that Aliyun's achievements are gratifying to congratulate. But we may wish to reconsider this issue from the perspective of the establishment of the National Security Council, the escalation of the national security model, to examine its impact on national security and to raise a few questions. First, cloud security certification who has the final say? Aliyun's business covers not only hundreds of thousands of small and medium-sized websites in China, but also the core business network involving finance, energy, and government users. Can it provide strong, stable and secure cloud computing services? It's good to pass British standards, but it's not something you can say.

Secondly, what does safety standards mean? The promotion of safety standards is definitely not a purely good thing, implied in the subsequent business interests self-evident. The adoption of a standard, not only to clean up their own security mechanisms, but also to use the matching standards of their products, the standard behind the following is a complete interest chain.

Its third, security "boost" will there be? And do not say whether Ali Group can analogy, the brilliant network marketing to the network security, only in the United States and its allies to ZTE, Huawei products, if the United Kingdom really allow Aliyun in its government, finance, energy sector to carry out business, that is truly awarded the gold medal. I remember a senior cipher said a word, "in the Network and information security, the most terrible is, in fact, is not safe, but you do not know." I hope the fledgling Chinese cloud industry does not fall into the dangerous position of being "boost" by international interest groups.