Seite 86-87 - Cloud Migration Taiwan 2013

86
ථ၌༶ၑᐄ༶୚ື
87
Chapter 3
5.
Κᎈٙ҅lzɛjఱၑ݊τΌણ݄ਂՑဈ˥ʔဍdɰೌ
ج
Ꮠ˹ථ၌؂ਕਠٙlz
௅ࡰʈᏺ͜Չᛆࠢ
א
બᛆdᙼ
܄ޒ
˒ᛆूԸᐏ՟ৌ
אي
Չ˼лूfΪ
މ
ථ၌
؂ਕ݊ΝӉ౤Զε
܄ࡈ
˒؂ਕdᛆࠢ
א
બᛆᏺ͜
ה
ிϓٙฦ̰ึˢɓছٙ༟
ৃ؂ਕһ
މ
ᘌࠠf
6.
ᏺ͜ථ၌༶ၑjᒯᔛ׵ථ၌༶ၑ
ܝߠ
ٙൗ̅༟ৃʿ؂ਕ€तй݊ίʮ͜ථ
Դ͜ਛΤٙЪ
ج
dʔШᜫ͕ໆ٫л͜੶ɽԨַ̙࢝ٙ
IT
༟๕੽ԫ
ݺ
ਗdɰ
ʔ࢙׸֛ໆfவԬ
ݺجڢ
ਗܼ̍༆ක੗ᇁʿॎ༆
ږ
ᝌeԴ͜ၾછՓⶋ܉ၣ१
ʿ౳ᅧెจழ᜗ഃdே඲੗ʲ္છf
7.
Չ˼͊ٝٙࠬᎈjίમ͜ථ၌༶ၑ؂ਕ
ۃ
dɓ֛
ࠅ
˺୚༔ਪථ၌༶ၑ؂ਕਠ
Չ܁၈ٙ؂ਕतЍʿ΢ධ̌ঐ˙ࠦٙ޴ᗫਪᕚfν
ܘ؈
ልᕏdఱһ඲ආɓӉ
༔ਪථ၌؂ਕਠᗫ׵τΌஈଣ೻ҏʿՉ౤Զٙ༟τ޴ᗫ؂ਕٙतᓃd˸൙П
؂ਕਠ
ה
౤Զٙ؂ਕʿՉᏐᜊણ݄݊щୌΥცӋf߰ίϤ˙ࠦ
א
Չ˼޴ᗫਪ
ᕚٙΫᔧdೌ
ج
တԑცӋd
ߧ
Դථ၌༶ၑ؂ਕਠٙ༟τ၍ଣतᅄԱ್ʔ׼d
࿁ଡ଼ᔌϾԊdவᅵٙ؂ਕఱึՈϞ৷
ܓ
ࠬᎈf
νОᒒеၾࠥЭථ၌༟τࠬᎈ
Ϊ
މ
Άุʿִ݁࿁׵݊щኬɝථ၌༶ၑdึաࠢ׵ࠬᎈٙϽඎdΪϤί஝ྌኬɝ
ථ၌Ҧஔʿථ၌̮̍؂ਕ
ۃ
d̀඲΋੽޴ᗫࠬᎈ݊щ̙஗၍છٙԉ
ܓ
ԸᏨൖfτΌɪ
ٙცӋ࣬ኽԴٙ͜ઋྤϾϞ
ה
ʔΝ€
SaaS
e
PaaS
e
IaaS
א
ʮ͜e૿Υʿ໊ٟථഃ؂
ਕfவԬேίɽඎٙ޼Ӻజѓʿ˙০ܸ
ی
€ν
BITKOM
16
e
EuroCloud
17
e
ENISA
18
eථ၌τΌᑌຑ
CSA
19
dʿථ၌؂ਕਠ༟τ
ܔ
ᙄʕึϞ
༆ה
ᙑf
ථ၌༶ၑ͜˒Ꮠમ͜˸ɨ
7
ࡈ
˴
ࠅ
ԣᇍણ݄dԸཫԣ
א
ࠥЭτΌɪٙࠬᎈ
:
1.
່֛༟ࣘ
ڭ
ᚐᄴॴjίථ၌ᐑྤʕႡЪ
א
ᔷ୅༟ࣘࣛd͜˒̀඲ਗ਼༟ࣘʱᗳ
€νjʱϓɓছ༟ࣘe৷
אܓ
฽৷
ܓ
τΌᄴॴ༟ࣘഃdʱؓՉτΌცӋd
Ԩ່֛ථ၌؂ਕਠᏐνОᎷπ
א
ෂ৔ԟԬ༟ࣘdՉʕɰܼ̍Դ̋͜੗ஈଣ೻
ҏ
א
ί՟͜
ݔ
Ԭत֛༟ࣘɪમ͜ˢ༰ልᕏٙᛆࠢண
ࠇ
fϤ̮d༟ࣘτΌഃॴ
ٙʱᗳձ່֛dᏐԱኽථ၌؂ਕਠ
ࠈה
ٙτΌᅺ๟ԸආБf
2.
ථ၌༟ࣘٙτΌᎷπjᎷπٙ༟ࣘ˸ʔΝစၑ
ج
€νආච̋੗ᅺ๟
AES
ʿ
ږ
ᝌ
ܓڗ
€ν
256
ЗʩɽʃЪ̋੗fਿ͉ɪd൳੶ٙ̋੗೻ҏ˾
ڌ
༟ࣘ
ڭ
ᚐ൳̋τΌf̋੗ٙഃॴ̀඲֛ࣛٙ಻༊ၾၚආdʑঐᆽ
ڭ
ၾࣛ
ࡆ
ආf
ᒱ್̋੗ՈϞ
ܘ
εᎴᓃdථ၌؂ਕٙ͜˒ʥც
ࠋ
ப
ږ
ᝌٙ၍ଣfν
ږ؈
ᝌ፲
̰dఱึ̰̘̋੗ٙ༟ࣘfν
ږ؈
ᝌቊաฦᕸd༟ࣘτΌɪٙ
ڭ
ᚐɰึ༧
ഹ೯͛ਪᕚf܄˒̀඲ፅඎ
ږ
ᝌ၍ଣٙ፯኿Ԩમ՟̀
ࠅ
ણ݄˸ࠥЭΚᎈf
Ϥ̮dஈଣʕٙ༟ࣘٙ̋੗Җόʥ݊Ϟ
༆ܙ
ӔٙਪᕚfவਪᕚΪΝ࿒̋੗
€
homomorphic encryption
ҦஔٙစආϾϞ
ה
ආ࢝f್Ͼdͦ
௰ۃ
׼ᆽ̙Б
ٙ˙ࣩఱ݊ίஈଣ༟ࣘ
ۃ
d΋࿁༟ࣘ̋੗f
3.
ථ၌༟ࣘٙτΌෂ፩jৰəτΌٙeཞᕎٙ༟ࣘᎷπ٤ග̮dίථ၌ᐑྤ˸
ʿε
ࡈ
ථ၌༟ࣘʕːʘගτΌήෂ჈܄˒༟ࣘɰ
ܘ
ࠠ
ࠅ
€Էνj຾͟
SSH
e
ၣყၣ༩ஷৃ՘֛τΌ€
IPSec
eτΌෂ፩ᄴॴ
/
τΌࢁટᄴ՘ᙄ€
TLS/
SSL
eൈᏝӷɛၣ༩ഃஷৃ၍༸
20
f
4.
τΌٙ༟ࣘஈଣjஈଣ༟ࣘࣛdतйࠠ
ࠅ
္ٙ݊છၾা፽
ה
Ϟٙ༟ࣘ՟ձՉ
˼޴ᗫ
ݺ
ਗdΪϤც
ࠅ
္છᎷπ؂ਕʿථ၌Ꮠ͜೻όٙੂБཀ೻d˸ᗆй݊
щቊՑҸᏘfᑘԷԸႭdίʔర੬ٙࣛග
א
੽ʔర੬ٙήᓃπ՟༟ࣘdேϞ
̙ঐቊՑҸᏘf
16
Cloud computing-Evolution in technology, revolution in business, BITKOM,2009
年
10
月;
Cloud
computing-What decision-makers should know, BITDOM, 2010
年
12
月
20
日
17
Law, data protection & Compliance, EuroCloud, 2011
年
12
月
2
日
18
Catteddu, D. and Hogben, G.,(
主編
),
Cloud Computing: Bene ts, risks and recommendations for information
security,
歐洲網路與資訊安全局(
ENISA), 2009
19
Brunette, G. and Mogull, R.,(
主編
),
Security Guidance for Critical Areas of Focus in Cloud Computing V
2.1
Cloud Security Alliance, 2009);Cloud Security Alliance
(
2001))
及對雲端運算供應商的安全建議
20
本章的延伸請參考
網站資料