Information Center

How dare the virtual machine escape? Cloud security assessment and certification system is coming!

  

Today, the Ministry of Industry released the three-year cloud computing development plan (2017-2019). The "Plan" proposes that by 2019, China's cloud computing industry will reach 43 billion yuan, breaking the application level of core key technologies in the manufacturing industry, the government and other fields has been significantly improved, and there are 2-3 leading enterprises in the global cloud computing market with a large share.

Cloud security

The "Plan" supports the leading of large-scale professional cloud computing business, establishes cloud manufacturing manufacturing innovation centers with research institutions and universities, organizes and implements a number of key industrial innovation projects, and grasps the development highland of cloud computing.

The "Plan" wrote that the implementation of the "Guidance on the Construction of Integrated Standardization System for Cloud Computing" promoted and improved the standard system framework.

The "Plan" also proposes to support the combination of local authorities and cloud computing backbone enterprises, establish cloud computing development and testing for public service platforms, and provide public services such as consulting, training, research and development, and business.

The "plan" wrote that for key industries in the areas of innovation and development needs, increase support in capital, credit, talent and other aspects, accelerate the cultivation of a number of technical strength and business scale, highlight innovation, and the market prospect has a strong impact on cloud computing enterprises and cloud computing platforms. Support the backbone of leading enterprises, enrich service types, improve service capabilities, innovate business models, create ecosystems, promote the formation of cloud computing industry echelon, and constantly improve the system development strength in China's cloud computing field.

The plan also proposes to deepen the "mass entrepreneurship and innovation" of large enterprises, encourage and support the use of cloud computing to develop business innovation platforms, provide guidance for entrepreneurship by establishing open platforms and venture capital funds, and promote online and offline resources and SME innovation in other forms.

Safety is definitely essential. The "Plan" wrote to promote the establishment and improvement of laws, regulations and management systems related to cloud law. Strengthen cloud computing network security protection management, implement public cloud service security protection and information security management system construction requirements, and improve cloud computing service network security standards. Improve public cloud service rating records, security assessment and other efforts to carry out public cloud service network security inspection, urge cloud service enterprises to effectively implement network and information security responsibilities, promote the implementation of security measures, and improve capabilities. And gradually establish a cloud security assessment and certification system.

In addition, for the type security issues newly generated under the cloud computing environment, such as virtual machine escape and multi tenant data protection, we have broken through the cloud computing platform, key core security technologies, and cloud computing environment to strengthen security risks.