何謂雲端儲存

Recently popularized models of computing, namely decentralization, have had their impact on cloud storage. While cloud storage has used distributed systems to enhance storage redundancy and resilience, cooperative storage attempts to pool the storage resources of many “nodes” in the system, without the centralized management common in other cloud models. Sometimes this is referred to as peer-to-peer storage cloud, or a cloud storage co-op.

Generally, P2P software will be installed on all participating nodes, in which each contributes some storage capacity to the system. Then the system makes the aggregate storage available to all participants. Typically there is not a dedicated server for hosting data, an application server can be used for control and management across the collective storage for sharing and retrieving data from across the cooperative.

Cloud storage offers advantages and disadvantages over on-premise storage options. In balancing these pros and cons, organizations can choose to operate using only cloud storage options, however an effective strategy is to employ hybrid cloud storage configurations that can help companies design their systems to reduce the disadvantages while benefiting from their advantages. The following pros and cons should be considered when deciding on cloud storage.

Advantages

• Offloading of Cloud Management — By using cloud storage, companies can, in effect, offload administrative responsibility of their storage assets to the cloud provider. This helps to reduce costs, reclaim valuable staff time, and simply workflows.
• Rapid Setup and Implementation— Unlike most on-premise storage setups, when companies expand their storage capacity, services can be set up within hours, rather than the days it would take to physically expand on-premise infrastructure.
• Superior Scalability — The cloud has theoretically unlimited scaling potential. Additionally, costs of scaling are controlled under a pay as you go model which helps to lower expenses.
• Data and Business Continuity — Unless there is a sizable storage infrastructure, most companies will be challenged by data continuity plans. In the cloud, data is the holy grail, and every measure is ensured to protect and secure it. Companies without the resources or expertise to maintain data continuity can turn to cloud providers to ensure their data and business continuity. And likely they will do it better because they are able to leverage economies of scale and provide the latest in technology and best practices advancements.

Disadvantages

• New Security Paradigms — Data security is a priority within the cloud, but the nature of data traversing the public internet poses new security threats. Market leading cloud providers will offer significant security protections to ensure their clients' data does not suffer attack. These will include new paradigms, like moving away from the fortress security mentality, towards “zero-trust” access and authentication policies.
• Limited Administrative Controls — While migrating to the cloud helps simplify administrative controls, it can also limit them as well. Ensure that vendors are providing the monitoring that aligns with business goals.
• Network Performance — Network performance remains a concern, of which downtime and network latency are the most critical. Some solutions are increasing bandwidth, or if the need is vital, committing a dedicated line.
• Compliance Obligations — Data regulations require protection of personal information, and, concerning cloud storage, data must reside on physical devices within the country/region that it belongs. This means, knowing where data lives in the cloud, literally, is a necessary concern for organizations, especially information sensitive ones like finance, and healthcare.

Cloud storage security is the designs and blueprints of how an organization will implement and manage their cloud security. There are four major concerns when placing data in the cloud, data security, network security, endpoint protection, and identify & access control.

• Data Security — Data security addresses security measures that protect data traversing a network, and when that data comes to rest in storage. Several controls can be deployed in security data, including: encryption, public key infrastructure, deployment of encryption and tunneling protocols, use of block and streaming ciphers, and using granular storage resource controls.
• Network Security — While data can be encrypted before transit, network security is concerned with controls on the pathways between systems. Companies can deploy several network/security controls to further protect their systems, including: network segmentation, firewalls, DDoS protection, packet capture, intrusion prevention/detection systems (IPS/IDS), packet brokers, network access controls (NAC), and APIs.
• Endpoint Protection — Endpoints provide logical places for security measures, like bouncers at clubs. These measures include: host-based firewalls screen received data (standard firewalls are usually Internet, perimeter defenses), antivirus/anti-malware software, endpoint detection and response (EDR) systems provide real-time awareness, use of data loss and prevention (DLP) systems to enforce data flows, harden systems, blacklist and whitelist applications.
• Access Control — Access controls ensure those privileges are granted only to those who need them. Poor access control management can lead to difficult to prevent threat opportunities. Consider these measures: identification, authentication, and authorization systems; multi-factor authentication, or single sign-on (SSO).