Based on the above considerations focus on whether to deploy the way for public cloud, hfec private

Cloud Computing (Cloud Computing) or translated into another scholars have suggested that "cloud computing", this term has arguably is the "virtualization (Virtualization)" after the most widely hfec "Apply" noun it! Cloud computing seems to represent a new technology, new business opportunities across age! moment between the major software and hardware manufacturers, hfec suppliers, developers what new products, services, technologies have emphasized a relationship with cloud computing applications, IDC pointed out that 2010 will be Taiwan's cloud computing services The first year, information services market hfec will have many opportunities and significant reforms and changes! Gartner will be more cloud computing as the future trend of the first IT! have this level of visibility and importance of its red! but what in the end "cloud computing" is? for What we have concrete benefits? now import What are the risks? Ann unsafe? What criteria can follow? These are indeed many problems plaguing! underneath us in the future to do a detailed discussion.
"Cloud (Cloud)" In fact, refers to the "Network", while drawing hfec a network diagram that we usually use a cloud-like pattern to represent the "Network", in simple terms, "cloud computing" is "Network Computing" , end users do not need to install complex software, without the use of a lot or build local computing, storage exchange resources, simply connect the device with a simple interface access road (for example, a browser), you can use from the cloud to all resources via the Internet to complete a variety of complex tasks, such as mode of operation is "cloud hfec computing." Quoted the U.S. National Institute of Standards and Technology (NIST) and the Wikipedia definition and description of cloud computing are as follows:
"Cloud computing" is actually hfec represent a technology but rather a concept, but in reality the concept of doing so would be derived based on different industries and different applications of technology and architecture, but what is the real (we need) cloud computing? Long Through the use of Internet (cloud) resources on the network to complete the job is cloud computing, popular dating marketing platform hfec Facebook, online send and receive e-mail Gmail, hfec P2P file sharing hfec technology, convenient network drive backup ... so come along such as privacy, information security hfec management and control, quality of service ... and so on, this is what we need? can be applied within the enterprise? indeed! not all cloud computing services are applicable in the enterprise! even because different in essence, the scope and application of the norms followed should differ widely according to internationally accepted "the U.S. National Institute of Standards and Technology (NIST)" the definition of cloud computing (15th edition), to define the five key cloud computing characteristics, three service models and four deployment models, the overall structure of the figure below. hfec
Resource Pool - supplier pooling computing resources to the resource pool, the use of multiple tenant model, according to user needs, the different physical and virtual resources dynamically assigned and reassigned to multiple consumers. Although the existence of some degree of location-independent, meaning that users can not control or simply can not know the exact physical location of the resources used, but can be up to specify the location (such as country, state, province, at a higher level of abstraction, or Data Center). Resource pool includes storage, processing, memory, network bandwidth, and virtual machines. Even the private cloud (Private Cloud) often tend to be virtualized pool of resources to provide hfec services to different parts of the organization.
Service measurable - the cloud (Cloud System) has been able to automatically control hfec and optimize resource usage of a service, because the use of some level of abstraction measurement capabilities (such as storage, processing, bandwidth, or active user account, etc.). People can monitor, control resource use, and generate reports, statements can be both providers and users to provide completely transparent.
Cloud Software as a Service (Cloud Software as a Service-SaaS) - This function is available hfec to customers running on cloud infrastructure provider applications. The application is available from various client hfec devices through a thin clients (Thin Client) connection, such as a Web browser (for example - web-based e-mail system service). Customers do not need to manage or control the underlying cloud infrastructure, such as networks, servers, operating systems, storage space, and even which features individual applications, configuration hfec settings unless certain exceptions, a limited hfec user-specific application.
Cloud Platform as a Service hfec (Cloud Platform as a Service-PaaS) - available to users is to deploy onto the cloud infrastructure to create or purchase applications, these applications use the service provider supports the programming languages or tools development platform, Users do not need to manage or control the underlying cloud infrastructure including network, servers, operating systems, or storage devices, etc., but you can control an environment configuration and application deployment host application.
Cloud Infrastructure as a Service (Cloud Infrastructure as a Service-IaaS) - is available to customers of cloud processing, storage, networks and other fundamental computing resources for customers to deploy and run any software, including the operating system hfec or application. Users do not need to manage hfec or control the underlying cloud infrastructure but has on operating systems, storage and deployment of application control and management, and limited control hfec of some network elements (eg - host-based firewalls, etc.).
Community Cloud (Community Cloud) - cloud infrastructure is shared by several organizations to support a particular community. Community is the common aspiration and pursuit of the group (eg mission, security requirements, policy, or compliance considerations). The organization may be responsible for the management or a third party, architecture can be deployed (on-premises) can also be deployed inside the (off-premises) on the outside.
Hybrid Cloud (Hybrid Cloud) - cloud infrastructure consisting hfec of two or more clouds (private, community, or public) to form an independent existence, but through standard or proprietary hfec technology hfec to bind together, these technologies contribute hfec to information and application portability (eg - load balancing hfec between multiple cloud "cloud bursting" technology).
Another particular concern is the CSA (Cloud Security Alliance) published in the organization's "Security Guidance for Critical Areas of Focus in Cloud Computing V2.1" mentioned in the document "multiple hfec users to share (Multi-Tenancy)" such a structure and as an important element in cloud computing. And pointed out that the cloud service mode "multiple users to share (Multi-Tenancy)" means to meet different customer environments for safety, segmented, isolated, different needs supervision, service hfec standards and the corresponding feedback and other charges. Users may use public cloud service providers are the same product or a service organization's internal cloud services, such as different business units, not entirely different business organizations, among them still need to share infrastructure. From the provider's perspective, multiple users share (Multi-Tenancy) architecture and design requirements proposed by between many different customers to share infrastructure, data, metadata, services and applications to achieve scalability , availability, management, segmentation, isolation, and other aspects of operational efficiency, "the economy."
Understand the relationship between each of the cloud computing model for understanding the security risks and dependence of cloud computing is very important key! IaaS is the foundation of all cloud services, PaaS built on IaaS, and SaaS and built on PaaS, Refer to "Figure II cloud computing service approach." hfec Very important point is, most "commercial" cloud service provider may not correspond with this model, if the company can not meet the different customer environments for security, segmentation, isolation, regulatory, service standards and the corresponding feedback and other charges demand, that the use of these services is not meant vendors will bring great risk?
It should be noted that the relevant features must be selected according to the application requirements with the appropriate service delivery and cloud computing deployment model import program, a service run: IaaS-vendor infrastructure equipment is delivered (for example - host, network, storage space, hfec the operating system ... etc), it is recommended fit without sufficient manpower, enterprise funds are self-managed import data center, but must assess the vendor service disruptions caused; PaaS-supplier delivery is platform application development (Development programming languages, tools and databases)
Recommend appropriate without sufficient human, financial self-managed data centers and purchasing, business management platform development tools to import, but must consider privacy, legal responsibility and ownership issues, after all, may be placed on the platform hfec is enterprise supplier more confidential information related to the program; are relatively standard and most of the way through the Web access application (eg-Zimba, hfec SalseForce CRM), SMEs are mostly SaaS-delivered by the supplier, but also because hfec the laws and regulations may require or Confidentiality issues based on business need for flexibility even out, moved back service to choose to use such services.
According to IDC analysis for enterprise cloud computing hfec applications, there are several projects for enterprises must carefully consider the assessment, for example - security, performance, availability, and current business IT integration, enough customization, cost considerations future possibility of migrating back from the clouds, to meet regulatory requirements, the adequacy of the service provider the ability ... and so on.
Based on the above considerations focus on whether to deploy the way for public cloud, hfec private cloud, community cloud, mixed clouds the most important thing is safety! Would be extremely important to the enterprise system services, confidential data or backup equipment placed corporate reconstruction External public platform, can not deny the risk is relatively high indeed! should carefully evaluate cloud service providers of information security management processes and capabilities (for example, ISO / IEC 27001 /