Oracle云计算的安全策略针对私有云和公有云的策略.pptVIP

* * Oracle Confidential * * Oracle Confidential * While Cloud Computing is certainly very alluring and has a clear value proposition, here are recent news highlights that indicate the dangers of cloud computing. Anytime you unlock sensitive data and expose it via a cloud you risk access control complexities, data privacy issues and compliance violations. S was recently hacked by some hackers perpetrating a phishing scam on Salesforce insiders. Hackers also exploited a data privacy issues with Google Docs . Finally as illustrated by a couple of news highlights here, there needs to be adequate safeguards to protect data in the cloud. A recent survey conducted by IDC revealed that security is the most critical barrier to adoption of cloud computing. An overwhelming 74% of responders cited security as the major issue preventing them from embracing cloud computing. Among the top issues cited by responders as critical barriers to cloud: Security – Traditional issues involving data privacy and resource access control, encryption and detection/prevention of breaches Compliance – Conformance with required regulatory, legal and general industry requirements (such as PCI, HIPAA and Sarbanes-Oxley) Control – The ability of an provider to directly manage how and where data and software is deployed, used and destroyed * There are three different cloud deployment models. While each model has its owns pros and cons, there are some serious security issues in each model. Private Cloud: - Since enterprise IT is involved in delivering the private cloud security infrastructure, agility is a concern as opposed to public clouds where outsourcing of IT which results in improved agility Enabling seamless and secure collaboation between different business entities such as partners, customers and employees is a challenge - Considering a diverse mix of users comprised of employees, contractors, suppliers and vendors require access to critical data, managing access control c