The dialectical relationship between virtualization and cloud security

October 15, 2013, in the company launched enterprise-class information security products-Virtualization system security Software news conference, the National Information Center and the security Department of the network Li Yunyu Director on the issue of the safety of virtualization made a speech, and on the relationship between virtualization and cloud security of the dialectic in-depth original analysis.

Li Yunyu says virtualization is one of the most important technical features of cloud computing. Cloud computing is now developing rapidly in China, cloud computing has a lot of technical content, including distributed computing, dynamic and expansion of a variety of technology algorithms, but personally understand that virtualization is the most important technology in the cloud. Virtualization is diverse, including desktop virtualization on the client side, server virtualization in the data center, virtualization of storage space, and virtualization of applications, so it is important to mention that virtualization cannot think of just one. Relevant data indicate that the 2007-2010 hazy period is the introduction of the cloud, 2013 is the cloud's growth phase, 2013-2015 is the cloud's mature stage. As for the prediction of cloud computing development model, which is the mainstream of future development, the development model of public cloud and private cloud? This needs to be considered, as individuals think that lightweight private clouds will develop faster and more quickly than the public cloud, and that private cloud applications are much more likely to become mainstream in the future.

Why has cloud computing grown so fast these years? is the condition ripe?

First, cloud computing is really reducing the cost of use, many foreign governments are leasing the cloud computing platform for office; second, cloud computing can reduce energy consumption, the server is on demand under the cloud conditions, when the application needs more open the server, when the application needs less to open the server; Third, the most important aspect is the convenient use, Especially now the wide use of smartphones and mobile office, we are more or less using the cloud.

Of course, we are still worried about security, "security has become the development of cloud computing a wind wall." According to relevant survey data, in the cloud computing challenges in the security of 74.6% to the top of the list, and on the other hand virtualization is to solve the key information security issues, the main solution is: 1, terminal stay secret. Terminal stay is a very important part of security secrecy, the ideal state is that the computer terminal can not keep secret documents, but also do not allow the secret workers to take the notebook or the ipad to bring home, how to make the computer terminal not to stay secret? This is a difficult problem, but virtualization can do it. 2, storage security, just as it is safer to deposit money in the bank than at home, compared to the data in the cloud is more secure, because the cloud has more professional security measures. 3, the computer terminal Security Configuration management, this aspect may reduce the manpower management. 4, virus Trojan killing aspect, this aspect now application already quite many, everybody also very familiar.

At the same time, virtualization also presents some new security issues and challenges: remote escape or migration of virtual machines, security protection issues for cloud computing infrastructure, protection of personal privacy, illegal theft of data or information, denial of service, or access to an attack. When it comes to the relevant countermeasures, Li Yunyu director said, "first on the technical level, I hope that more companies like rising company to develop virtualization security products, can be in the protection of infrastructure, identity privacy protection, data information security to develop a variety of security products." At the standard level, cloud computing standards should be developed to provide a normative basis for security and solutions. There is also a lot to be done at the legal and regulatory levels.

"Virtualization is an important technical feature of cloud computing, the conditions of application of cloud computing are now basically available, but the new security issues brought about by virtualization should be highly valued." The good news is that virtualization is also the key to addressing these critical information security issues.