86
ථ၌༶ၑᐄ༶ື
87
Chapter 3
5.
Κᎈٙ҅lzɛjఱၑ݊τΌણ݄ਂՑဈ˥ʔဍdɰೌ
ج
Ꮠ˹ථ၌ਕਠٙlz
ࡰʈᏺ͜Չᛆࠢ
א
બᛆdᙼ
܄ޒ
˒ᛆूԸᐏ՟ৌ
אي
Չ˼лूfΪ
މ
ථ၌
ਕ݊ΝӉԶε
܄ࡈ
˒ਕdᛆࠢ
א
બᛆᏺ͜
ה
ிϓٙฦ̰ึˢɓছٙ༟
ৃਕһ
މ
ᘌࠠf
6.
ᏺ͜ථ၌༶ၑjᒯᔛථ၌༶ၑ
ܝߠ
ٙൗ̅༟ৃʿਕतй݊ίʮ͜ථ
Դ͜ਛΤٙЪ
ج
dʔШᜫ͕ໆ٫л͜੶ɽԨַ̙࢝ٙ
IT
༟๕ԫ
ݺ
ਗdɰ
ʔ࢙֛ໆfவԬ
ݺجڢ
ਗܼ̍༆කᇁʿॎ༆
ږ
ᝌeԴ͜ၾછՓⶋ܉ၣ१
ʿᅧెจழഃdேʲ္છf
7.
Չ˼͊ٝٙࠬᎈjίમ͜ථ၌༶ၑਕ
ۃ
dɓ֛
ࠅ
˺༔ਪථ၌༶ၑਕਠ
Չ܁၈ٙਕतЍʿධ̌ঐ˙ࠦٙᗫਪᕚfν
ܘ؈
ልᕏdఱһආɓӉ
༔ਪථ၌ਕਠᗫτΌஈଣҏʿՉԶٙ༟τᗫਕٙतᓃd˸൙П
ਕਠ
ה
ԶٙਕʿՉᏐᜊણ݄݊щୌΥცӋf߰ίϤ˙ࠦ
א
Չ˼ᗫਪ
ᕚٙΫᔧdೌ
ج
တԑცӋd
ߧ
Դථ၌༶ၑਕਠٙ༟τ၍ଣतᅄԱ್ʔd
࿁ଡ଼ᔌϾԊdவᅵٙਕఱึՈϞ৷
ܓ
ࠬᎈf
νОᒒеၾࠥЭථ၌༟τࠬᎈ
Ϊ
މ
Άุʿִ݁࿁݊щኬɝථ၌༶ၑdึաࠢࠬᎈٙϽඎdΪϤίྌኬɝ
ථ၌Ҧஔʿථ၌̮̍ਕ
ۃ
d̀ᗫࠬᎈ݊щ̙၍છٙԉ
ܓ
ԸᏨൖfτΌɪ
ٙცӋ࣬ኽԴٙ͜ઋྤϾϞ
ה
ʔΝ
SaaS
e
PaaS
e
IaaS
א
ʮ͜e૿Υʿ໊ٟථഃ
ਕfவԬேίɽඎٙӺజѓʿ˙০ܸ
ی
ν
BITKOM
16
e
EuroCloud
17
e
ENISA
18
eථ၌τΌᑌຑ
CSA
19
dʿථ၌ਕਠ༟τ
ܔ
ᙄʕึϞ
༆ה
ᙑf
ථ၌༶ၑ͜˒Ꮠમ͜˸ɨ
7
ࡈ
˴
ࠅ
ԣᇍણ݄dԸཫԣ
א
ࠥЭτΌɪٙࠬᎈ
:
1.
່֛༟ࣘ
ڭ
ᚐᄴॴjίථ၌ᐑྤʕႡЪ
א
ᔷ༟ࣘࣛd͜˒̀ਗ਼༟ࣘʱᗳ
νjʱϓɓছ༟ࣘe৷
אܓ
৷
ܓ
τΌᄴॴ༟ࣘഃdʱؓՉτΌცӋd
Ԩ່֛ථ၌ਕਠᏐνОᎷπ
א
ෂԟԬ༟ࣘdՉʕɰܼ̍Դ̋͜ஈଣ
ҏ
א
ί՟͜
ݔ
Ԭत֛༟ࣘɪમ͜ˢ༰ልᕏٙᛆࠢண
ࠇ
fϤ̮d༟ࣘτΌഃॴ
ٙʱᗳձ່֛dᏐԱኽථ၌ਕਠ
ࠈה
ٙτΌᅺԸආБf
2.
ථ၌༟ࣘٙτΌᎷπjᎷπٙ༟ࣘ˸ʔΝစၑ
ج
νආච̋ᅺ
AES
ʿ
ږ
ᝌ
ܓڗ
ν
256
ЗʩɽʃЪ̋fਿ͉ɪd൳੶ٙ̋ҏ˾
ڌ
༟ࣘ
ڭ
ᚐ൳̋τΌf̋ٙഃॴ֛̀ࣛٙ༊ၾၚආdʑঐᆽ
ڭ
ၾࣛ
ࡆ
ආf
ᒱ್̋ՈϞ
ܘ
εᎴᓃdථ၌ਕٙ͜˒ʥც
ࠋ
ப
ږ
ᝌٙ၍ଣfν
ږ؈
ᝌ፲
̰dఱึ̰̘̋ٙ༟ࣘfν
ږ؈
ᝌቊաฦᕸd༟ࣘτΌɪٙ
ڭ
ᚐɰึ༧
ഹ೯͛ਪᕚf܄˒̀ፅඎ
ږ
ᝌ၍ଣٙ፯Ԩમ՟̀
ࠅ
ણ݄˸ࠥЭΚᎈf
Ϥ̮dஈଣʕٙ༟ࣘٙ̋Җόʥ݊Ϟ
༆ܙ
ӔٙਪᕚfவਪᕚΪΝ࿒̋
homomorphic encryption
ҦஔٙစආϾϞ
ה
ආ࢝f್Ͼdͦ
௰ۃ
ᆽ̙Б
ٙ˙ࣩఱ݊ίஈଣ༟ࣘ
ۃ
d࿁༟ࣘ̋f
3.
ථ၌༟ࣘٙτΌෂ፩jৰəτΌٙeཞᕎٙ༟ࣘᎷπ٤ග̮dίථ၌ᐑྤ˸
ʿε
ࡈ
ථ၌༟ࣘʕːʘගτΌήෂ܄˒༟ࣘɰ
ܘ
ࠠ
ࠅ
Էνj͟
SSH
e
ၣყၣ༩ஷৃ֛τΌ
IPSec
eτΌෂ፩ᄴॴ
/
τΌࢁટᄴᙄ
TLS/
SSL
eൈᏝӷɛၣ༩ഃஷৃ၍༸
20
f
4.
τΌٙ༟ࣘஈଣjஈଣ༟ࣘࣛdतйࠠ
ࠅ
္ٙ݊છၾা
ה
Ϟٙ༟ࣘ՟ձՉ
˼ᗫ
ݺ
ਗdΪϤც
ࠅ
္છᎷπਕʿථ၌Ꮠ͜όٙੂБཀd˸ᗆй݊
щቊՑҸᏘfᑘԷԸႭdίʔర੬ٙࣛග
א
ʔర੬ٙήᓃπ՟༟ࣘdேϞ
̙ঐቊՑҸᏘf
16
Cloud computing-Evolution in technology, revolution in business, BITKOM,2009
年
10
月;
Cloud
computing-What decision-makers should know, BITDOM, 2010
年
12
月
20
日
17
Law, data protection & Compliance, EuroCloud, 2011
年
12
月
2
日
18
Catteddu, D. and Hogben, G.,(
主編
),
Cloud Computing: Bene ts, risks and recommendations for information
security,
歐洲網路與資訊安全局(
ENISA), 2009
19
Brunette, G. and Mogull, R.,(
主編
),
Security Guidance for Critical Areas of Focus in Cloud Computing V
2.1
Cloud Security Alliance, 2009);Cloud Security Alliance
(
2001))
及對雲端運算供應商的安全建議
20
本章的延伸請參考
網站資料