Some people think that cloud security is the most difficult problem in the entire industry, and they will not be solved in the near future, but some people think that cloud security is not a big problem because cloud service providers have stricter security than customers. Measures. In many surveys on this topic, security issues are always an important concern, and they have therefore become a top priority for many IT shops. There are already some innovative solutions for safety standards. These standards may eventually help to eliminate some problems, but there is still a long way to go before the introduction of these standards. Now there is one thing to make clear, that is, do n’t make any assumptions without doing a full investigation in person. Jay Heiser, an analyst at market research firm Gartner, has been working on the potential risks faced by companies and regulations. Heiser said: "Service providers may be doing a lot of work to protect data, or are creating a more secure application framework, which is good, but the biggest problem is how do you determine that they are doing these tasks. If the provider cannot (Through testing and data verification) Prove that their products are as safe as they advertise. As a result, you will not be able to make a decision on whether to choose them. " According to Fred Cate, director of the Cyber ​​Security Application Research Center at the Indiana University ’s Morrill School of Law, the biggest challenge facing companies when it comes to cloud security is who should be held accountable for the law. Cate said: "The cloud service provider believes that the company should be responsible for this, and the company believes that the cloud service provider should be responsible. In order to solve this problem, some companies have chosen trusted service providers such as Microsoft." However, He pointed out that this approach has led to a significant reduction in customer selectivity, and this approach also cannot ensure data security, because you only choose a well-known service provider for your cloud infrastructure. Fortunately, some new technologies are helping to ensure the security of the cloud. At least for employees, it will become more difficult to publish intellectual property or sensitive data on the public cloud. United Airlines: Cloud computing deployed on aircraft United Airlines started a radical experiment. United this year will provide crew members with 10,000 Apple iPads. These iPads will replace flight kits that store manuals, aeronautical charts and other non-sensitive information used for flight preparation. Crew members can access hosting service providers such as Jeppesen to obtain online flight manual services. United also uses iPad as a communication tool to update company news and employee information. John Van Hoogstraten is the managing director of United Airlines responsible for IT security and risk management. He said that the company tends to gradually implement cloud-related deployments, but because mobile devices such as the iPad have many advantages, they can no longer postpone related deployment matters. These advantages include better management of flight manuals and lower fuel costs because the crew Members no longer need to carry heavy flight bags. He said that the company is currently using Symantec products for identity management and virus protection. Next, they will consider deploying a single sign-on product called "Symantec O3 Cloud Identity and Access Control" to perform a single authentication process. United Airlines executive director John Van Hoogstraten, who is responsible for IT security and risk management, said they are considering using single sign-on technology to simplify cloud software certification. Hoogstraten: "We need to use a secure authentication system to ensure the identity of the people who use the iPad, especially when the pilot flies to those third-world countries that lack security." His plan is to use single sign-on because it can Access United Airlines' Active Directory (AcTIve Directory) system and provide an entrance for crew members to access service providers. This means that pilots do not have to log in to different services multiple times, which saves pilots time. Single sign-on is the most common new mechanism to deal with cloud security issues. This means that there is only one point of failure when a problem occurs. O3 will operate as a tool in the data center, which means that all cloud access will flow through the device, which may reduce the connection speed. Heiser said: "Single sign-on solves the fundamental problem of cloud security, that is, the balance between convenience and security. Of course, authentication is not always the biggest problem. Let us review a Gmail (password) accident. In the accident, People can easily gain access. Many companies should be aware that passwords are flawed. " To solve this problem, Symantec uses two-factor authentication. Typically, employees need the tag ID and password installed on the iPad to gain access to cloud services. Cate said that in dealing with new security issues similar to iPad access to company systems, a secure solution is to include security audits as part of the deployment. One benefit of security auditing is that you can discover some potential risks, such as over-reliance on a certain strategy. "If you store large amounts of data in one place, then the easier you are to be the target of attacks, and the more worth it for hackers to spend time attacking you." He said that the security assessment must be meticulous, in addition to data storage and strategy, but also to check specific devices like iPad or smartphone. This means using automated risk management tools and conducting risk assessments. For example, United pilots will be the first to use iPad to communicate news in the company. If executives decide that tablet computers will be deployed to ground crews, then the company should assess the overall risk. "Every company should consider these questions: if so, how much trouble will be encountered? What is the risk of doing so? Do n’t just focus on the legal production troubles, but also on the company ’s reputation and shareholders. influences." Big Water Tank Vacuum Cleaner,Vacuum Cleaner,Vacuum Cleaner With Socket,Vacuum Cleaner For Roads NingBo CaiNiao Intelligent Technology Co., LTD , https://www.intelligentnewbot.com
July 10, 2020