The significance of information security level protection in the era of cloud computing (1)

Cloud computing is another major technological change in the field of information after computers and the Internet. While the advent of cloud computing provides new opportunities for development, the security of cloud computing remains a serious challenge. Since 1994 the State Council promulgated the "People's Republic of China Information System security Regulations" (State Council [order 19,941,147th), Information system security level protection system gradually perfect mature. Has played a significant role in the traditional architecture of the information system. The advent of cloud computing has brought about a series of changes in system architecture, but no matter how it develops, it belongs to information system, which has the universal characteristics of information system. Cloud computing security management can still be implemented in accordance with the requirements of the level of protection. Cloud computing security issues There is currently no unified, defined definition of cloud computing. Wikipedia considers cloud computing to be a dynamically scalable virtualization resource that provides computing patterns to users through the Internet, without knowing how to manage the infrastructure that supports cloud computing. In fact, cloud computing is a concept, not a specific technology or standard. At the same time, cloud computing is also an operational model that provides IT resources, data, and applications as services across the network to users. In short, the essence of cloud computing is sharing and collaboration. In recent years, major IT enterprises have invested and calculated, the major commercial platforms such as springing up to launch. However, the problems of these cloud platforms are also followed by constant exposure. 2007-2008 years, the Amazon cloud platform a wide range of failures, 2009, Microsoft Cloud Platform crashes, data loss, and in 2009, Google also has customer personal information leaked?? In the era of cloud computing, where resources and data are in the clouds, security issues are more important. Due to the changes in the architecture, cloud computing security issues also have its unique characteristics: ① in the cloud computing environment, the network architecture is unified, the hardware resource is highly integrated, the traditional security boundary disappears; ② virtualization as the core technology of cloud computing, the design and deployment of security equipment to put forward higher requirements; ③ data centralized storage processing requires effective identification, Authentication management, access control, security audit and other security mechanisms; ④ data and applications rely heavily on cloud computing centers, whose stability and reliability are more demanding than traditional systems. The security problems in the cloud computing model are: Hackers invade cloud servers to steal data, cloud service provider employees steal sensitive data from customers, and other customers who use the same cloud service provider to accidentally acquire or steal sensitive data; Cloud resources are maliciously abused and used to spam or malicious hosts; Foreign governments can read data in the local cloud data center without the client's authorization, customers are not easy to audit the security control measures and access records of cloud service providers, and the cloud service provider's disaster preparedness management is not perfect, which leads to service interruption; Cloud service providers fail to continue to provide services; user account password stolen, Cloud service resources have been compromised. 1 2 Next >> view full-text navigation page 1th: Cloud Computing Security Issues page 2nd: Level protection still applies to cloud computing: the significance of information security level protection in the era of cloud computing (1) Return to network security home