There are still many "secrets" to cloud computing security

Today, when we talk about cloud computing, it may no longer be strange. Our health data, life data, work data, etc., are constantly uploading "cloud" at all times. When cloud computing is implemented in various fields, cloud security issues become a huge challenge. On July 29-31, at the "Second International Conference on Cloud Computing and Security" hosted by Nanjing University of Information Engineering, elite scholars from all over the world discussed cloud computing, cloud security and other issues, and discussed the future development direction of this field.
How to Play "Secret War" in the Information Age
Today, with the rapid development of information technology, in the era of cloud computing and big data, there may be a lot of information hidden in a seemingly ordinary picture. In this meeting, "digital watermarking" technology was mentioned by experts many times.
Shi Yunqing, a professor at the New Jersey Institute of Technology, told reporters that the so-called "digital watermark" is to use some special methods to embed information in the documents, pictures or videos sent to the cloud, but there is no difference on the surface. Only professionals can use special tools to analyze and read the hidden content information. "Speaking of watermarks, you may know that they are the ones on the RMB, and 'digital watermarks' are watermarks added to digital media through digital means in the Internet world."
"For example, if you see a shared picture in the cloud, if digital watermark is added to it, ordinary people will only see a picture, but as the real receiver or detector of the picture, they can obtain some information through analysis." Shi Yunqing said that in fact, some foreign media have reported that some terrorists around the world are using "digital watermark" to transmit information, rumors, Osama bin Laden used this technology to secretly transmit terrorist instructions through network pictures, videos, etc. "Maybe at that time, they added digital watermark to the news video, and what we saw was normal news. As terrorists scattered around, they had analytical methods and tools, and might have received important instructions," Shi Yunqing said.
"Digital Watermark" has been used to combat piracy
It sounds like "digital watermark" is a bit like "password" in spy war dramas. Professor Wang Jinwei, School of Software and Computer Science, Nanjing University of Information Engineering, explained that the password we used in the past was to encrypt a piece of clear text into a string of garbled code that could not be understood by normal logic. It needed to be decoded before it could be read. Unlike "digital watermarking", it does not need to transfer information into garbled code, but directly hides it in the carrier. Therefore, "digital watermarking" with strong concealment will be used in the "secret war" in the field of information security.
Fu Zhangjie, associate professor of the School of Computer and Software, Nanjing University of Information Engineering, told reporters that "digital watermarking" can also be encrypted, decrypted and then embedded in the multimedia carrier, so even if others know that there is information in it, it needs a decryption process to extract.
In fact, in real life, "digital watermarking" technology has been widely used in the copyright protection of pictures and books. Fu Zhangjie said that many book publishers and film producers will add "digital watermarks" to the books and films they distribute. Once the pirates download or use them without authorization, the publishers and publishers will be able to get the information at the first time, and track the time, location and copy flow of the pirates, so as to strengthen the crackdown.
"In fact, on some image sharing websites now, they will directly help the author's image with visible or invisible digital watermark to protect the rights and interests of the author. Generally speaking, when you pay for the visible digital watermark, you can directly download the original image. When you encounter some images without visible digital watermark, you should not take chances. If you do not pay for direct theft, you may also be tracked down, even if you cut the image is useless Of. " Wang Jinwei said.
Is it really safe to put data in the cloud?
Now, we are more and more accustomed to storing data in the "cloud", such as uploading photos synchronously, updating contacts synchronously, etc. Many service providers will also say that the uploaded data is encrypted, so everyone always thinks that with "cloud" backup, the data is very safe. Is this really the case?
Professor Wang Jinwei believes that as people use various "clouds" more and more widely, the potential security risks are gradually exposed. "When your information is only stored in your mobile phone or computer, the resources are relatively scattered, which may not be enough to attract the attention of hackers and other illegal elements, but when a large amount of data is collected on a platform, it is easy to attract the attention of hackers." This is equivalent to "putting eggs in a basket". Previously, each computer was a single personal data storage. If hackers attack, It needs to be broken individually, but when countless "eggs" are put in one basket, once hackers break the "basket", all "eggs" will be broken.
Wang Jinwei said that although in terms of information and data storage, enterprise-level security is certainly more secure than personal computers, and the security level will be much higher, at the same time, in terms of the current situation, due to cost considerations and technical difficulties, cloud security protection is far from enough. In fact, in recent years, there have been some cases of data leakage caused by attacks on relevant service providers. Wang Jinwei suggested that whether personal information will be illegally obtained and used by cloud platform builders is also a problem that needs to be prevented. Although we still trust most platforms, with the explosive growth of the industry, more and more platforms may appear, and we can't determine whether the platform builders themselves are safe and reliable.
The development of cloud security technology should pay attention to the needs
How can enterprises and universities find a good development direction in cloud computing and cloud computing? Wang Jinwei said frankly that in terms of colleges and universities, there are many hardware resources that are not as good as enterprises. Some large enterprises will have their own research institutes, but colleges and universities can continue to strengthen research in theory and develop their own advantages. But both enterprises and universities should start from demand.
Wang Jinwei told reporters that when users upload data to the cloud, in order to ensure the security of cloud storage, the transmission process should be an encryption process, but how to quickly retrieve the encrypted files? "In fact, many people will feel that it is easy to find photos in a few days by using mobile phones, but it is difficult to find photos in a few days after using them for a long time." In the same way, in the "cloud", it is difficult to find useful data quickly and accurately because there are too many data and encryption. Wang Jinwei said, "At present, this is a big problem, involving text encryption and retrieval, multimedia encryption and unlocking, so this is also one of the current hot research directions."
Source: http://www.yangtse.com/kepu/science/news/2016-08-11/200689.html