云计算剖析

云计算作为一种独特的IT服务模式,其本质为:

“云计算的本质是一种服务模型,通过这种模型可以随时、随地、按需地通过网络访问共享资源池的资源,这个资源池的内容包括计算资源、网络资源、存储资源等,这些资源能够被动态地分配和调整,在不同用户之间灵活地划分。凡是符合这些特征的IT服务都可以被称为云计算服务。” ——“Security Guidance For Critical Areas Of Focus In Cloud Computing V3.0”

上面的定义很好地说明了云计算的本质。为了将这个定义更方便地匹配到现实世界的IT架构中,NIST(U.S. National Institute of Standards and Technology——美国国家标准与技术机构)提出了一个定义云计算的标准——“NIST Working Definition of Cloud Computing/NIST 800-145”。这个文档中提到一个标准的云计算服务需要具备五个基本元素,分别是:通过网络分发服务、自助服务、可衡量的服务、资源的灵活调度,以及资源池化。这个标准还提到云计算按照服务类型可以分为IaaS、SaaS和PaaS三类,而按照部署模式可分为公有云、私有云、混合云和社区云四种。

NIST 800-145被业界普遍接受的原因是其提出的云计算五大要素非常简练地说明了一个云计算系统的特征,只有同时具备这五点的IT架构才可以被称为云服务架构,通过这五个特征能够快速地将云计算系统同传统IT系统区分开来。

  • 0
    点赞
  • 0
    收藏
    觉得还不错? 一键收藏
  • 0
    评论
Interest in cloud computing has grown rapidly in recent years due to the advantages of greater flexibility and availability in obtaining computing resources at lower cost. Security and privacy, however, are a concern for agencies and organizations considering transitioning applications and data to public cloud computing environments, and form the impetus behind this document. 1.1 Authority The National Institute of Standards and Technology (NIST) developed this document in furtherance of its statutory responsibilities under the Federal Information Security Management Act (FISMA) of 2002, Public Law 107-347. NIST is responsible for developing standards and guidelines, including minimum requirements, for providing adequate information security for all agency operations and assets; but such standards and guidelines shall not apply to national security systems. This guideline is consistent with the requirements of the Office of Management and Budget (OMB) Circular A-130, Section 8b(3), “Securing Agency Information Systems,” as analyzed in A-130, Appendix IV: Analysis of Key Sections. Supplemental information is provided in A-130, Appendix III. This guideline has been prepared for use by federal agencies. It may be used by nongovernmental organizations on a voluntary basis and is not subject to copyright, though attribution is desired. Nothing in this document should be taken to contradict standards and guidelines made mandatory and binding on federal agencies by the Secretary of Commerce under statutory authority, nor should these guidelines be interpreted as altering or superseding the existing authorities of the Secretary of Commerce, Director of the OMB, or any other federal official. 1.2 Purpose and Scope The purpose of this document is to provide an overview of public cloud computing and the security and privacy challenges involved. The document discusses the threats, technology risks, and safeguards for public cloud environments, and provides the insight needed to make informed information technology decisions on their treatment. The document does not prescribe or recommend any specific cloud computing service, service arrangement, service agreement, service provider, or deployment model. Each organization must perform its own analysis of its needs, and assess, select, engage, and oversee the public cloud services that can best fulfill those needs.
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值