The current situation and development trend of cloud computing security

December 8, 2009, RSA Chief Technology officer Bret Hartman came to China, ZDNet reporter interviewed him. Mr. Bret Hartman and I shared RSA's current status and trends in the area of cloud computing security. Bret believes that cloud computing will face more security threats, companies should devote more effort to ensure the security of the cloud, dynamic password technology will gradually become mainstream. Cloud computing security crisis when it comes to cloud computing security, Mr. Bret Hartman stressed that the security risks in the cloud computing environment are now very serious, and I think the security threat will become more severe in the future. Because of the increasing number of attacks in the cloud computing open environment, many computing resources in the open environment will face more risks in the future. Bret says RSA is now working very closely with VMware, especially in the implementation of the "V-cloud" strategy for VMware, because RSA's security technology should be able to help our customers meet the challenges they face in future cloud computing environments. RSA meets the three security requirements of cloud computing service providers in the cloud computing environment, and the first level provides protection to cloud resource providers to protect them from external attacks, such as cyber-crime and cyber-attack threats. The second level can meet the data isolation between different tenants of cloud computing environment. We know that in a cloud environment, there may be more than two users (tenants) between the data will not interfere with each other, and a user without authorization, can not access the data of another user. The third level to ensure that the cloud service provider's own platform security, such as access control, identity authentication and other basic requirements, we can guarantee to other users of the cloud service provider's own platform security. Only to meet the needs of these three aspects, enterprises can be very comfortable to transfer their applications to the cloud platform, so as to achieve compliance purposes. In answer to the reporter about the enterprise migration to the cloud of doubt, Bret said, in fact, real business concerns are very reasonable, now no one can say, all cloud computing environment is absolutely safe. The security of cloud computing is an area that RSA attaches great importance to. Some of these security measures already exist, and RSA is widely deployed, such as some anti-fraud measures. Some of these technologies are RSA's need to provide further technology for development, such as security technologies deployed on virtual platforms. Therefore, RSA is facing a very important goal today, to provide enterprise users with the right guidelines, the right road map, so that enterprises in today's environment gradually migrated to the cloud environment. Dynamic authentication will become mainstream before we got a report that a Swiss company Valorec service added three times times the number of RSA SecurID on-demand certification tokens, ensuring business continuity through secure remote access. The company used to be equipped with RSA SECUThe RID is mainly a small number of people, including senior management. It decided to increase the deployment of RSA SecurID, in order to advance preparedness for the pandemic, the need for remote access to the office at any time the possibility of a significant increase. We are very curious about how a technology product is to help the enterprise to prevent the swine flu, in the interview, Mr. Bret Hartman answered our doubts. Normally, employees may not need dynamic password support when they are working in the office, Bret said. But in an emergency, when an employee has to work at home, like a flu or pandemic, we have to make sure that our employees work as well as they do in the office. The RSA Authentication Management Server can provide real-time dynamic passwords to employees who are working overtime, so that their employees will be able to access their resources at home. When it comes to the trend of dynamic passwords, Bret that there is a very important security shift from static security mechanisms to dynamic security. There are a lot of different trends on this topic, but throughout the 09 years these security trends have become more and more powerful, and security is becoming more powerful because RSA is now moving to dynamic security, and security is becoming more powerful in a dynamic security environment. One of the technologies is Data center authentication, which is mainly based on user behavior, analyzing its identity through user behavior, namely re-use Authentication "adaptive authentication". This kind of adaptive authentication can solve the man-in-the-middle attack threat, which cannot be solved by the traditional user ID and password method. Another kind of dynamic security technology is content-based security technology. Products and technologies like our data loss protection are mainly about how the content of the data is, and whether the data is sensitive to the content. Under such dynamic security mechanism, data Loss Provention (loss protection) can dynamically prevent credit card data from being attacked, which is different from the previous static mode.