To treat drugs to the wrong way to solve the problem of cloud computing security

Cloud computing fire, for a while, the overwhelming, Shiten, regardless of authority for cloud services will create huge business opportunities for the forecast, just imagine that in the cloud computing era, everyone can interact with the cloud computing resources of the wonderful picture, can be exciting.

In fact, the basic idea of cloud computing is simple: The service provider's data center is responsible for storing information that has been kept on the end-user's personal computer or in the enterprise's own data center, and is accessed remotely by users over the Internet. So we can also generalize that cloud computing is just a change in service mode.

How is cloud security dispel?

But like the Achilles heel of Achilles, cloud computing is also congenitally deficient, and that is its privacy and security. As mentioned earlier, the nature of cloud computing is a change in service patterns, so the security of cloud computing is shifted more to the cloud service provider's level, so the problem is much simpler.

First, rely on policy and regulatory support. The fundamental solution to this problem is to rely on government departments or equivalent authorities to force cloud computing companies to adopt the necessary measures to ensure the security of their services. Only the future national government departments to enact relevant laws and regulations, the cloud computing enterprises mandatory compliance checks, including manufacturers of customer commitment to the unreasonable, the manufacturer to keep the commitment to the extent, manufacturers in the treatment of customer data audit and supervision and so on.

Second, return to the essence of the problem. The network within the cloud vendor is no different from the networks of most of our businesses, and the security measures to be implemented are traditional security measures. Including access control, intrusion prevention, anti-virus deployment, to prevent internal data leaks and network content and behavior monitoring audit, but the subject has changed.

Third, strictly control operation and maintenance flow. Decentralization has always been a good strategy. For example, the operation of cloud computing system is divided into two levels, level is the ordinary operation of the personnel, they are responsible for day-to-day operations, but can not log into the physical host, also can not enter the controlled room, access to the user data, the second level is a core authority of personnel, although they can enter the computer room can also be logged into the physical host, But it is controlled by the operation and maintenance process.

With the above, we can conclude that cloud computing has changed the way we serve, but it has not subverted the traditional security model, but has shifted the subject of security responsibility to the cloud service provider and the cloud service provider to secure the service. It can be said that not only cloud services, basic Internet services are not escape the "security" problem. Since it cannot be avoided, the service provider can only face it bravely.