云安全,大数据时代

Cloud secure

1.One of the most serious concerns is the possibility of confidentiality violations. Either

maliciously or accidentally, cloud provider’s employees can tamper with or leak a company’s data. Such actions can severely damage the reputation or finances of a company.( 一个最严重的问题是保密的可能性违规行为。要么恶意或无意,云供应商的员工可以篡改或泄漏公司的数据。这种行为会严重损害的声誉或财务状况的一个公司)——[21] Santos N, Gummadi K, Rodrigues R (2009) Towards trusted cloud computing.

采取的措施：

1)In order to prevent confidentiality violations, cloud services’ customers might resort to

encryption.为了防止机密性侵犯,云服务的客户可能会诉诸加密

2)Cloud service providers are making a substantial effort to secure their systems, in order to

minimize the threat of insider attacks, and reinforce the confidence of customers.For example, they protect and restrict access to the hardware facilities, adopt stringent accountability and auditing procedures, and minimize the numberof staff who have access to critical

components of the infrastructure.(云服务提供商正在实质性的努力以确保他们的系统,以最大限度地减少威胁内幕攻击,增强客户的信心。例如,他们保护和限制访问硬件设施,采用严格的问责制和审计程序,减少数量的员工可以访问的关键部件基础设施。)

3)The TCCP provides the abstraction of a closed box execution environment for a customer’s

VM, guaranteeing that no cloud provider’s privilege d administrator can inspect or tamper with its content. Moreover, before requesting the service to launch a VM, the TCCP allows a customer to reliably and remotely determine whether the service backend is running a trusted TCCP implementation. This capability extends the notion of attestation to the entire service, and thus allows a customer to verify if its computation will run securely.(TCCP提供的抽象的一个封闭的盒子执行环境客户的虚拟机,保证没有云提供商的特权管理员可以检查或篡改它的内容。此外,在请求服务启动一个虚拟机,TCCP允许客户可靠和远程确定服务端运行一个可信TCCP行安全。)

In this paper, we argue that concerns about the confidentiality and integrity of their data and computation are a major deterrent for enterprises looking to embrace cloud computing.在本文中,我们

认为,担心机密性和完整性的数据和计算是一个主要障碍,为企业寻求拥抱云计算