SecaaS中的增值业务分析

Analysis of Value-Added Service of Security-as-a-Servic

云计算代表了当前工业界最有价值的信息技术演进方向,而云计算环境下的安全也越来越受到安全工业界的重视,越来越多的云用户开始意识到将安全资源聚集的意义,Secaa S(安全即服务)就是安全资源集中化的一个典型应用。文章首先依据云安全联盟对安全即服务的分类,对身份认证及访问控制、数据丢失防护,Web安全、入侵防御等云安全涉及的业务类型进行定义和介绍;然后对云计算(以Iaa S为主)环境下的安全即服务技术进行阐述,包括Iaa S环境下的安全防护涉及的内容以及由此衍生的可能形成服务的增值业务,随即分享作者对安全增值业务的部署模型、需要的技术支撑以及云数据中心涉及的增值业务的研究成果。

Cloud computing represents the most valuable evolution direction of current information technology industry. Under the cloud computing environment, security has drawn more and more attention in the field of security industry, more and more cloud users begin to realize the significance of the concentration of safety resources, one typical application is SecaaS（Security-as-a-Service）. Based on Cloud Security Alliance＇s classification of security as a service, the identity authentication and access control, DLP, Web security, intrusion prevention and other service types are defined and introduced simply; then the SecaaS technoloies under the cloud computing environment（mainly laaS） are desribed, including safety protection and other potential value added services derived from them, then the safety value added service deployment model, the necessary technical support and value-added services in cloud data center environment are shared.