资源描述:
《Cloud Computing and the Common Man》由会员上传分享,免费在线阅读,更多相关内容在学术论文-天天文库。
1、SECURITYCloudComputingandtheCommonManJohnViega,McAffeeThecloudoffersseveraladvantages,butuntilsomeofitsrisksarebetterunderstoodmanymajorplayersmightholdback.loudcomputingisoneofwhichrunsintheWebbrowser.Inbetweenthesethreemodels.Thethebiggesttechnologythismodel,applicationsc
2、ouldrunsystem’ssecuritydependsonthingsbuzzwordsthesedays.entirelyonthenetwork,withtheusermostlyoutoftheuser’scontrol,suchCItoperatesfromtheideainterfacelivingonathinclient.asensuringtheITenvironment’sthatworkdoneontheclientsidecansecurityfromoutsideattackerswho,bemovedtosom
3、eunseenclusterofPaasforexample,attempttobreakintoresourcesontheInternet.Fromtheconsumer’sviewpoint,backendsystemsandstealdata.Inmanyrespects,cloudcomput-PaaSsoftwareprobablyresemblesLikewise,securityfromwithintheingisanoldidea.Inthe1990s,forSaaS,butinsteadofsoftwaredevel-en
4、vironmentmustbeensuredif,forexample,Suntriedtopromotethinopersbuildingtheprogramtorunonexample,someoneusesaflawinanclientsthatperformedallcomputingtheirownWebinfrastructure,theyapplicationtoscanotherusers’dataworkontheInternet.Morerecently,buildittorunonsomeoneelse’s.Forort
5、amperwithotherapplicationswe’veheardaboutapplicationserviceexample,GoogleoffersGoogleApphostedinthesameenvironment.providers(ASPs)andsoftware-as-a-Engine,aservicethatletsdevelop-Theauthenticationandencryptionservice(SaaS),atermpopularizedmentorganizationswriteprogramsmethod
6、sused,aswellastheplaintextwiththeriseofSalesforce.com.torunspecificallyonGoogle’sprotocolswithpasswords,poseariskinfrastructure.factorforallinvolved.CloudsystemstodayCurrently,developersworkIaasdanger:openenvironmentwiththreemajorcloudsystemsSimilartoPaaS,IaaSletsthedevel-I
7、nthiscase,theITenvironmentcategories:software-as-a-service,opmentorganizationdefineitsownisn’tsomethingthesoftwaredevel-platform-as-a-service,andinfra-softwareenvironment.Thisbasicallyoperhasmuchcontrolover.Thestructure-as-a-service.deliversvirtualmachineimagestothecloudpro
8、vidermustbeupfrontaboutIaaSprovider,insteadofprograms,itspolicies,andapplicationde