Smart city cloud security faces five challenges

Now all over the country have set off the upsurge of intelligent city construction, many enterprises began to try to use public cloud technology as the core to improve it resource utilization, promote intelligent medical care, intelligent education, intellectual mining and other information construction, such as telecommunications cloud, municipal cloud, education cloud, community cloud, tourism cloud, etc. for all kinds of top-level applications to provide support. In addition, all over the country, including operators of large enterprises are pushing it private cloud landing, improve the efficiency of enterprise IT systems.

However, the security threat brought by cloud technology is the biggest challenge for the current cloud business development and even the future network society. In particular, faced with the ongoing cloud security incidents, enterprises have to build end-to-end cloud security system as the immediate need to solve the first problem.

The security problem in cloud period appears

"Nearly 1/3 of current security issues are new security issues with cloud services, and these new issues are focused on the virtual machine level." Many traditional security problems in the era of cloud computing also have a new form, more harm, more impact range. "Ministry of Communications Research Institute of Planning and Design Xu Zhiha said.

According to China Unicom related people, cloud computing has gradually entered the stage of large-scale development, information Security Center of gravity has shifted from border protection to data protection. The advent of cloud computing makes the traditional network boundaries disappear, information ownership and management rights are separated, and unauthorized access to information assets becomes the key security problem of cloud computing system. "Cloud computing multi-tenant Environment, virtual technology, dynamic, data migration and other integrated factors leading to data security and privacy protection are facing greater challenges." ”

Xingshihao, deputy director of the Ministry of Industry and Information technology, said in a recent meeting on communications security The risk of introducing cloud computing includes two aspects, on the one hand, the threat of information security, more and more organizations and individuals put the information into the cloud, and the massive information in the large-scale and centralized cloud is confronted with the security risk of destruction and loss in the process of transferring storage.

The second aspect of cloud services security threats, cloud services brings together a large number of computer and network equipment, once launched into the security of public Internet poses a huge threat. While mobile applications can remotely access cloud services, this also brings more avenues for cyber attacks.

Therefore, as a public cloud service provider, the government, telecom operators, financial and other areas of institutions and enterprises need to protect their own cloud data center security, but also in the provision of cloud services for enterprises, to protect the enterprise information and data security.

Take Ping An city as an example, the high definition video and the interconnection between cities will produce a lot of data, the application of cloud computing can greatly improve the system's computing ability and storage ability, reduce the difficulty of system deployment, reduce the cost of management and maintenance. But because of the public safety, the information security of the cloud system used in the safe city becomes very important.

The public cloud faces five major security challenges

In the public cloud service, in recent years, China has not occurred large-scale and more serious cloud services security incidents, in general, in the initial stage of security problems, but the future security situation will become complicated. At present, most of the network security problems of cloud service in our country belong to the traditional security problem, but there are many new problems or new manifestations.

According to Xu Zhiha, China's cloud service network security is facing five challenges one is the user and service providers did not establish a trust relationship; the second is that China's cloud services are small, running time is short, not experiencing the security test of large-scale users and service environment, facing more uncertainty in the future Third, cloud service core technology still can not get rid of controlled situation, not master core technology is the biggest security hidden danger; Four is our country cloud security standard is still in the blank state, hinders our country cloud service rapid development; Five is not specifically for cloud security issued regulatory policies and laws and regulations, The existing policies and laws and regulations have not been amended accordingly.

Facing the problem of public cloud security, how can the industry solve it? Xu Zhiha suggested that our country should establish the cloud service security standard system, the level evaluation mechanism and the Cloud Security alliance. To establish concrete steps for the standard system, our country can set up the industry standard of cloud service security first, and promote the national standard to be promulgated as soon as possible; then, on the basis of the pilot project, the joint pilot enterprises promote the establishment of the security standard of cloud service in China, form a system, prioritize the cloud service, and finally establish the safety assessment Cloud computing Data Protection Guide, Cloud Computing Security Incident Response Guide, and security audits.

For the establishment of the security rating mechanism of cloud service, we should set up a third party evaluation organization under the leadership of the Ministry of Information, carry out the security grade assessment of cloud service in our country, combine the IDC data Center license issuing, and appraise and certify the data center that provides the cloud service.

Industry chain to protect private cloud

At present, China's private cloud development faster. In the telecommunications industry, with the development of technologies such as cloud data center, server virtualization and Desktop virtualization, operators around the world are beginning to absorb the value of it innovation brought about by cloud computing and virtualization technology. When the private cloud platform is set up, the operators ' IT system is faced with new security threats, IT security vendors such as trend technology, McAfee, rock Network branch, Green Alliance, etc., should assume their responsibilities, and all parties work together to provide security solutions for cloud computing.

Shandong Telecom IT technology related responsible people, any one of the innovative technology has two sides. Taking Shandong Telecom as an example, after the server cloud and cloud desktop, Shandong Telecom in improving compatibility and simplifying management, but encountered a security, anti-virus management problems. In the absence of such a hurdle, many users of Shandong Telecom (including the leader who used the ipad to access the document-flow system) have decided to abandon the new application and return to the physical desktop, even as the virtual desktop ' snail speed '.

At this juncture, Shandong Telecom, together with trend technology, VMware and other IT enterprises, in-depth research on the characteristics of virtualization products and a large number of load testing, based on the trend of technology server depth Security protection system (DEEP) "agentless" Anti-Virus technology deployment, The three problems of "start storm, anti-virus storm and upgrade Storm" are solved in the virtualization and cloud computing platform.