如今,云计算正在不断改变组织使用、存储和共享数据、应用程序及工作负载的方式.但同时,其也引发了一系列新的安全威胁和挑战.随着越来越多的数据进入云端,尤其是进入公共云服务,这些资源自然而然地就成为网络犯罪分子的目标.云服务平台自下而上由物理基础设施、网络及主机、虚拟化、云应用平台构成,同时,各系统平台间的通信及接口、云平台及租户数据等都是云服务的重要组成部分.基于此,笔者将自下而上,结合重点领域对云安全面临的常见威胁进行分析,并提出管控方案.%Today, cloud computing is changing the way organizations use, store, and share data, applications, and workloads. At the same time, it also triggered a series of new security threats and challenges. As more and more data enters the cloud, especially into public cloud services, these resources naturally become targets for cybercriminals. The cloud service platform is composed of physical infrastructure, network and host, virtualization, and cloud application platforms from the bottom up. At the same time, the communication and interfaces among various system platforms, cloud platforms, and tenant data are all important components of cloud services. Based on this, the author will analyze the common threats faced by cloud security from the bottom up, combined with the key areas, and put forward the management and control plan.
展开▼
