Technical standards for "cloud security"

At present, the industry's "cloud security" technology debate, a large part of the development of the standard. Earlier, Xu Xuerong to reporters that "cloud security" technology to achieve a huge cloud and thin client combination, so how to build an effective intelligent threat collection system, Computing cloud system, service cloud distribution system becomes very important. Users in the choice of time to choose in this area has a deeper accumulation of vendors, on the other hand to see the application of the size of the customer base, because a new technology is mature inseparable from long-term development and a large number of customer base.

In fact, cloud security technology due to the introduction of the time is not long, so the technology is still in the process of improvement, and because the network threat is dynamic change, so security technology is always in constant research and development, continuous progress in the process. At present, how to efficiently analyze and submit quickly is still the problem that most manufacturers need to solve.

"From the trend of technology," cloud security technology to promote, the user's response to the cloud support model is very easy to accept, and because of the use of local server group response, caching support and enterprise internal Cloud Server synchronization technology, the ' cloud security ' performance problem has been solved. Xu Xuerong said.

In addition, if considered from two aspects of network and security, Li Hongkei's view is that "cloud security" is composed of two parts, the protection entity and the service network. Corresponding, in the protection of the entity part to have a perfect variety of threat detection capabilities, such as mail security, Web page security, data security, system security, such as a clearer choice of classification protection, so that users can protect the entity's security defense direction and content has a clearer understanding. In addition, there should be visibility in the protection of service communications between entities and cloud networks, such as the Cloud network connectivity status of security packages such as mail security/system security/Web page security.

"Cloud security" for the manufacturers or to a degree of difference, it represents a service model, the actual defense category of different products are not the same definition, so the actual defensive effect on the user experience is not the same.

"The convergence of international concepts in the industry will focus on the ability of cloud security to protect entities and realize the threat of unified testing, which most manufacturers need to strengthen," he said. Of course, from the point of view of Fortinet, it will also emphasize more cloud Network Service mode, which can make it more convenient for enterprise users to understand the application of ' cloud security '. ”

Interestingly, "It's natural for domestic users to focus on standards, but unfortunately few users can understand and really understand these standards, whether in the US, Canada, or China," says Dr Zhang Hongwen, who is very candid about the technical standards of "cloud security". To touch the cloud itself with visible hands. ”

"Cloud security" technology in the choice of the pressure to face a variety of requirements: first, a strong, secure ' cloud security ' solution will affect the performance of the enterprise network itself, or even bring additional points of failure? Second, many users want to be able to quickly and accurately detect security threats from the Web, but are users concerned about the security device's own threat signature list database capacity is large enough? Third, as more and more security threats are embedded in the application, can simple, traditional packet detection be manageable? Four, if the vendor can not provide a multi-region distribution database host services, the support will be faced with the risk of cloud unresponsive? The "Cloud security" scheme offered by different vendors across terminals and gateways, will there be a compatibility risk in the application and update process? Zhang Hongwen said.

Indeed, when choosing a "cloud security" solution, end user considerations are a very important issue. Earlier, Nanning, director of Financial Information Center Liu in an interview, revealed that their initial cloud security technology is not very understanding, but as more and more security companies intervene, many of their peers are very concerned about the "cloud security" technology development, and many peers are involved in some product testing. From his understanding of the situation, the support of "cloud security" technology in the use and implementation of security products do have a simple, efficient advantages, the contrast of the security effect is very clear, especially to ensure that the security technology does not give the smooth enterprise network caused the burden.

But when it comes to using cloud computing technology to improve the information security architecture, director Liu says it remains to be seen, as there is a need for further experience with the security services and responses that are implemented through the Web cloud.