论坛公告:应用容器安全指南(SP800-190)中文版   美国政府宣布禁用卡巴斯基软件   《中华人民共和国网络安全法》讨论帖   新手报到专用帖   【论坛公告】关于本站广告贴泛滥问题的整理通知   

当前时区为 UTC + 8 小时


发表新帖 回复这个主题  [ 2 篇帖子 ] 
作者 内容
 文章标题 : 【开源翻译项目】向公共云迁移关键的安全和隐私问题
帖子发表于 : 2012-02-13 20:13 
离线
站长

关注按钮

注册: 2003-11-11 19:30
最近: 2018-01-08 16:04
拥有: 10,224.00 安全币

奖励: 878575 安全币
在线: 107583 点
帖子: 3276
以下是开源翻译项目《公共云计算安全与隐私指南(SP800-144)》(http://bbs.cisps.org/viewtopic.php?f=128&t=29613)第四章前言的原文及译文对照,感谢evajo辛勤和出色的翻译工作。请大家审阅译文并提出修改意见,我会给与提出修改意见者安全币奖励。

4. Key Security and Privacy Issues

4. 关键的安全和隐私问题

Although the emergence of cloud computing is a recent development, insights into critical aspects of security can be gleaned from reported experiences of early adopters and also from researchers analyzing and experimenting with available cloud provider platforms and associated technologies. The sections below highlight privacy and security-related issues that are believed to have long-term significance for public cloud computing and, in many cases, for other cloud computing service models. Where possible, examples of previously exhibited or identified problems are provided to illustrate an issue. The examples are not exhaustive and may cover only one aspect of a more general issue. For many of the issues, the specific problems discussed have been resolved. Nevertheless, the broader issue persists in most cases and has the potential to be expressed again in other ways among the various service models. Security and privacy considerations that stem from information technology outsourcing also exist; they are covered in the next chapter and complement the material below.

虽然云计算的出现是新鲜事物,但是对关键安全方面的深入了解却可以来源于早期试验的经验,也可以来源于调研人员对有效的云提供商平台或其他相关技术进行的分析和试验。以下章节强调隐私和安全相关的问题,这些问题被认为对公有云计算有长远的意义,而且很多时候,对其他云计算服务模式也有长远的意义。在适当的地方会提供之前列举或识别的疑问来描述问题。这些举例不能够非常全面,可能只覆盖一个普遍问题的一个方面。对许多问题来说,具体的疑问已经解决了。尽管如此,在大多数案例中的更多的问题,有可能在各种各样的服务模式中以其他方式再现。源于信息技术外包的安全和隐私考虑也同样存在;这些将在下一章覆盖并对以下信息进行补充。

Because cloud computing has grown out of an amalgamation of technologies, including service oriented architecture, virtualization, Web 2.0, and utility computing, many of the privacy and security issues involved can be viewed as known problems cast in a new setting. The importance of their combined effect in this setting, however, should not be discounted. Public cloud computing does represent a thought-provoking paradigm shift from conventional norms to an open deperimeterized organizational infrastructure—at the extreme, displacing applications from one organization’s infrastructure to the infrastructure of another organization, where the applications of potential adversaries may also operate.

由于云计算由技术融合而来,包括面向服务的架构、虚拟化、Web2.0和效用计算,所以许多涉及隐私和安全的问题可以看做映射于新环境的已知问题。不可低估新环境下的技术综合效果的重要性。公有云计算确实代表了一个发人深省的模式,从传统标准到开放边缘化组织架构,在极尽时,甚至可以将应用从一个组织的基础设施转移到另一个组织去,哪怕潜在对手也可能在这个基础设施中运行应用程序。


回到顶部
  用户资料  
 
 文章标题 : Re: 【开源翻译项目】向公共云迁移关键的安全和隐私问题
帖子发表于 : 2012-02-14 11:58 
离线
高级用户

注册: 2007-07-03 12:20
最近: 2018-02-05 11:41
拥有: 2,707.40 安全币

奖励: 1138 安全币
在线: 6396 点
帖子: 216
4. Key Security and Privacy Issues
关键的安全和隐私问题

Although the emergence of cloud computing is a recent development, insights into critical aspects of security can be gleaned from reported experiences of early adopters and also from researchers analyzing and experimenting with available cloud provider platforms and associated technologies. The sections below highlight privacy and security-related issues that are believed to have long-term significance for public cloud computing and, in many cases, for other cloud computing service models. Where possible, examples of previously exhibited or identified problems are provided to illustrate an issue. The examples are not exhaustive and may cover only one aspect of a more general issue. For many of the issues, the specific problems discussed have been resolved. Nevertheless, the broader issue persists in most cases and has the potential to be expressed again in other ways among the various service models. Security and privacy considerations that stem from information technology outsourcing also exist; they are covered in the next chapter and complement the material below.
虽然云计算的出现是新鲜事物,但是对关键安全方面的深入了解却可以来源于早期试验的经验,也可以来源于调研人员对有效的云提供商平台或其他相关技术进行的分析和试验。以下章节强调隐私和安全相关的问题,这些问题被认为对公有云计算有长远的意义,而且很多时候,对其他云计算服务模式也有长远的意义。在适当的地方会提供之前列举或识别的疑问来描述问题。这些举例不能够非常全面,可能只覆盖一个普遍问题的一个方面。对许多问题来说,具体的疑问已经解决了。尽管如此,在大多数案例中的更多的问题,有可能在各种各样的服务模式中以其他方式再现。源于信息技术外包的安全和隐私考虑也同样存在;这些将在下一章覆盖并对以下信息进行补充。


Because cloud computing has grown out of an amalgamation of technologies, including service oriented architecture, virtualization, Web 2.0, and utility computing, many of the privacy and security issues involved can be viewed as known problems cast in a new setting. The importance of their combined effect in this setting, however, should not be discounted. Public cloud computing does represent a thought-provoking paradigm shift from conventional norms to an open deperimeterized organizational infrastructure—at the extreme, displacing applications from one organization’s infrastructure to the infrastructure of another organization, where the applications of potential adversaries may also operate.
由于云计算由技术融合而来,包括面向服务的架构、虚拟化、Web2.0和效用计算,所以许多涉及隐私和安全的问题可以看做映射于新环境的已知问题。不可低估新环境下的技术综合效果的重要性。公有云计算确实代表了一个发人深省的模式,从传统标准到开放边缘化组织架构,在极尽时,甚至可以将应用从一个组织的基础设施转移到另一个组织去,哪怕潜在对手也可能在这个基础设施中运行应用程序。


--------本帖迄今已累计获得37安全币用户奖励--------


回到顶部
  用户资料  
 
显示帖子 :  排序  
发表新帖 回复这个主题  [ 2 篇帖子 ] 

当前时区为 UTC + 8 小时


在线用户

正在浏览此版面的用户:没有注册用户 和 2 位游客


不能 在这个版面发表主题
不能 在这个版面回复主题
不能 在这个版面编辑帖子
不能 在这个版面删除帖子
不能 在这个版面提交附件

前往 :  
cron
华安信达(CISPS.org) ©2003 - 2012