云技術(shù)企業(yè)賭定,企業(yè)為了保護(hù)其最具價(jià)值的信息資產(chǎn)免受黑客威脅,將愿意采用全新的計(jì)算技術(shù)。
上周,谷歌的云計(jì)算部門發(fā)布了一項(xiàng)基于“機(jī)密計(jì)算”概念打造的全新服務(wù)。谷歌負(fù)責(zé)云安全業(yè)務(wù)的副總裁蘇尼爾·波蒂在一次線上媒體吹風(fēng)會(huì)上對(duì)記者表示,機(jī)密計(jì)算是一種“突破性的技術(shù),能夠?qū)Α褂弥械臄?shù)據(jù)’進(jìn)行加密”。
由于機(jī)密計(jì)算有可能為解決安全問(wèn)題提供全新的解決方案,該技術(shù)在科技行業(yè)正越發(fā)受到重視。去年秋季,谷歌、微軟、阿里巴巴和VMware等科技公司紛紛加入了機(jī)密計(jì)算聯(lián)盟(Confidential Computing Consortium)。該聯(lián)盟是極具影響力的商用軟件非營(yíng)利性組織——Linux基金會(huì)的分支機(jī)構(gòu)。
據(jù)機(jī)密計(jì)算聯(lián)盟的外聯(lián)主席賽斯·諾克斯介紹,雖然在遭遇數(shù)據(jù)泄露問(wèn)題時(shí),許多企業(yè)會(huì)使用加密技術(shù)來(lái)隱藏?cái)?shù)據(jù),但黑客仍可通過(guò)多種方式獲取相關(guān)信息。
機(jī)密計(jì)算聯(lián)盟會(huì)員企業(yè)Fortanix的營(yíng)銷主管諾克斯舉例說(shuō),假設(shè)某人打開了自己電腦或手機(jī)里的應(yīng)用程序,此時(shí),原本處于加密狀態(tài)的數(shù)據(jù)就會(huì)自動(dòng)解密,同時(shí),該數(shù)據(jù)的相關(guān)記錄也會(huì)存入電腦或手機(jī)的內(nèi)存之中。因此,理論上說(shuō),黑客可以在用戶打開應(yīng)用程序時(shí)秘密竊取解密數(shù)據(jù)。
相較于僅隱藏?cái)?shù)據(jù),如果能對(duì)整個(gè)計(jì)算過(guò)程進(jìn)行加密,那么企業(yè)就會(huì)感覺(jué)自己的敏感信息得到了更全面的保護(hù),因而也會(huì)感覺(jué)更安全。
諾克斯警告稱,雖然科技行業(yè)對(duì)機(jī)密計(jì)算充滿熱情,但這種技術(shù)還是“一種新生事物,仍然處于應(yīng)用的早期階段”。又因?yàn)楹诳驮谂龅叫录夹g(shù)時(shí)常常要先花一些時(shí)間尋找其技術(shù)漏洞,所以現(xiàn)在斷言機(jī)密計(jì)算技術(shù)在抵御黑客方面的效果還為時(shí)尚早。其實(shí),無(wú)論防護(hù)技術(shù)如何進(jìn)步,黑客只要想入侵某目標(biāo),往往都會(huì)得手,而且也不需要非常復(fù)雜的技術(shù)。比如,他們只需通過(guò)向企業(yè)員工發(fā)送釣魚軟件,即可侵入企業(yè)的電腦系統(tǒng)。
話雖如此,微軟首席項(xiàng)目經(jīng)理、機(jī)密計(jì)算聯(lián)盟董事會(huì)主席斯蒂芬·沃利仍然認(rèn)為機(jī)密計(jì)算可以讓企業(yè)更放心地對(duì)自己的機(jī)器學(xué)習(xí)模型進(jìn)行更復(fù)雜的數(shù)據(jù)訓(xùn)練。舉個(gè)例子,假設(shè)有兩個(gè)組織,分別擁有各自的數(shù)據(jù)集,他們就可以使用機(jī)密計(jì)算來(lái)訓(xùn)練自己的機(jī)器學(xué)習(xí)模型,而無(wú)需擔(dān)心另一家公司可以剽竊自己的數(shù)據(jù)。
再以醫(yī)療保健企業(yè)為例,這種企業(yè)通常是不愿意與同行分享數(shù)據(jù)的,但機(jī)密計(jì)算技術(shù)則為其攜手開展機(jī)器學(xué)習(xí)項(xiàng)目創(chuàng)造了可能,從而可以一同探索新的醫(yī)療方案。
諾克斯表示,谷歌和微軟等云計(jì)算企業(yè)認(rèn)為,機(jī)密計(jì)算有可能促使企業(yè)將更多業(yè)務(wù)放到云上進(jìn)行。通過(guò)為企業(yè)應(yīng)用的整個(gè)計(jì)算過(guò)程(通常稱為工作負(fù)載)進(jìn)行加密,云計(jì)算供應(yīng)商能夠讓用戶更加確信自己的應(yīng)用程序安全無(wú)虞。
諾克斯表示,除了云計(jì)算供應(yīng)商,計(jì)算機(jī)芯片制造商也在機(jī)密計(jì)算技術(shù)中扮演著重要角色。該技術(shù)要想正常運(yùn)作,就需要AMD、英特爾等芯片供應(yīng)商在自家生產(chǎn)的半導(dǎo)體原件中構(gòu)建某些安全功能。
波蒂還在媒體吹風(fēng)會(huì)上表示,雖然谷歌新推出的機(jī)密計(jì)算服務(wù)目前只支持部分AMD處理器,但其最終將會(huì)支持其他廠家生產(chǎn)的計(jì)算機(jī)芯片。(財(cái)富中文網(wǎng))
譯者:Feb
云技術(shù)企業(yè)賭定,企業(yè)為了保護(hù)其最具價(jià)值的信息資產(chǎn)免受黑客威脅,將愿意采用全新的計(jì)算技術(shù)。
上周,谷歌的云計(jì)算部門發(fā)布了一項(xiàng)基于“機(jī)密計(jì)算”概念打造的全新服務(wù)。谷歌負(fù)責(zé)云安全業(yè)務(wù)的副總裁蘇尼爾·波蒂在一次線上媒體吹風(fēng)會(huì)上對(duì)記者表示,機(jī)密計(jì)算是一種“突破性的技術(shù),能夠?qū)Α褂弥械臄?shù)據(jù)’進(jìn)行加密”。
由于機(jī)密計(jì)算有可能為解決安全問(wèn)題提供全新的解決方案,該技術(shù)在科技行業(yè)正越發(fā)受到重視。去年秋季,谷歌、微軟、阿里巴巴和VMware等科技公司紛紛加入了機(jī)密計(jì)算聯(lián)盟(Confidential Computing Consortium)。該聯(lián)盟是極具影響力的商用軟件非營(yíng)利性組織——Linux基金會(huì)的分支機(jī)構(gòu)。
據(jù)機(jī)密計(jì)算聯(lián)盟的外聯(lián)主席賽斯·諾克斯介紹,雖然在遭遇數(shù)據(jù)泄露問(wèn)題時(shí),許多企業(yè)會(huì)使用加密技術(shù)來(lái)隱藏?cái)?shù)據(jù),但黑客仍可通過(guò)多種方式獲取相關(guān)信息。
機(jī)密計(jì)算聯(lián)盟會(huì)員企業(yè)Fortanix的營(yíng)銷主管諾克斯舉例說(shuō),假設(shè)某人打開了自己電腦或手機(jī)里的應(yīng)用程序,此時(shí),原本處于加密狀態(tài)的數(shù)據(jù)就會(huì)自動(dòng)解密,同時(shí),該數(shù)據(jù)的相關(guān)記錄也會(huì)存入電腦或手機(jī)的內(nèi)存之中。因此,理論上說(shuō),黑客可以在用戶打開應(yīng)用程序時(shí)秘密竊取解密數(shù)據(jù)。
相較于僅隱藏?cái)?shù)據(jù),如果能對(duì)整個(gè)計(jì)算過(guò)程進(jìn)行加密,那么企業(yè)就會(huì)感覺(jué)自己的敏感信息得到了更全面的保護(hù),因而也會(huì)感覺(jué)更安全。
諾克斯警告稱,雖然科技行業(yè)對(duì)機(jī)密計(jì)算充滿熱情,但這種技術(shù)還是“一種新生事物,仍然處于應(yīng)用的早期階段”。又因?yàn)楹诳驮谂龅叫录夹g(shù)時(shí)常常要先花一些時(shí)間尋找其技術(shù)漏洞,所以現(xiàn)在斷言機(jī)密計(jì)算技術(shù)在抵御黑客方面的效果還為時(shí)尚早。其實(shí),無(wú)論防護(hù)技術(shù)如何進(jìn)步,黑客只要想入侵某目標(biāo),往往都會(huì)得手,而且也不需要非常復(fù)雜的技術(shù)。比如,他們只需通過(guò)向企業(yè)員工發(fā)送釣魚軟件,即可侵入企業(yè)的電腦系統(tǒng)。
話雖如此,微軟首席項(xiàng)目經(jīng)理、機(jī)密計(jì)算聯(lián)盟董事會(huì)主席斯蒂芬·沃利仍然認(rèn)為機(jī)密計(jì)算可以讓企業(yè)更放心地對(duì)自己的機(jī)器學(xué)習(xí)模型進(jìn)行更復(fù)雜的數(shù)據(jù)訓(xùn)練。舉個(gè)例子,假設(shè)有兩個(gè)組織,分別擁有各自的數(shù)據(jù)集,他們就可以使用機(jī)密計(jì)算來(lái)訓(xùn)練自己的機(jī)器學(xué)習(xí)模型,而無(wú)需擔(dān)心另一家公司可以剽竊自己的數(shù)據(jù)。
再以醫(yī)療保健企業(yè)為例,這種企業(yè)通常是不愿意與同行分享數(shù)據(jù)的,但機(jī)密計(jì)算技術(shù)則為其攜手開展機(jī)器學(xué)習(xí)項(xiàng)目創(chuàng)造了可能,從而可以一同探索新的醫(yī)療方案。
諾克斯表示,谷歌和微軟等云計(jì)算企業(yè)認(rèn)為,機(jī)密計(jì)算有可能促使企業(yè)將更多業(yè)務(wù)放到云上進(jìn)行。通過(guò)為企業(yè)應(yīng)用的整個(gè)計(jì)算過(guò)程(通常稱為工作負(fù)載)進(jìn)行加密,云計(jì)算供應(yīng)商能夠讓用戶更加確信自己的應(yīng)用程序安全無(wú)虞。
諾克斯表示,除了云計(jì)算供應(yīng)商,計(jì)算機(jī)芯片制造商也在機(jī)密計(jì)算技術(shù)中扮演著重要角色。該技術(shù)要想正常運(yùn)作,就需要AMD、英特爾等芯片供應(yīng)商在自家生產(chǎn)的半導(dǎo)體原件中構(gòu)建某些安全功能。
波蒂還在媒體吹風(fēng)會(huì)上表示,雖然谷歌新推出的機(jī)密計(jì)算服務(wù)目前只支持部分AMD處理器,但其最終將會(huì)支持其他廠家生產(chǎn)的計(jì)算機(jī)芯片。(財(cái)富中文網(wǎng))
譯者:Feb
Cloud technology companies are betting that businesses worried about being hacked will adopt a new computing technique to safeguard their most valuable information.
Google debuted last week a new service for its cloud computing arm that’s built around a concept known as confidential computing. Google vice president of cloud security Sunil Potti told reporters during an online media briefing that confidential computing is a “breakthrough technology that encrypts data while in use.”
This idea of confidential computing is gaining momentum in the tech industry as a possible new solution to security woes. Last fall, for example, several tech companies like Google, Microsoft, Alibaba, and VMware joined the Confidential Computing Consortium (CCC), a new organization that’s part of the influential business software nonprofit Linux Foundation.
Although many companies use encryption technologies to conceal their data if and when they suffer a data breach, there are still several ways hackers can access the information, explained Seth Knox, an outreach chair for the CCC.
For instance, when someone opens an app, the data that a company originally encrypted becomes unscrambled, with a record of that data stored on a computer or smartphone’s memory, Knox, a marketing executive at CCC-member company Fortanix. explained. A hacker could, theoretically, use malware to covertly access the decrypted data when a user opens an app, he said.
By encrypting the entire computing process, companies can feel safer that their sensitive information is better protected than concealing only the data.
Despite the tech industry’s enthusiasm about confidential computing, it’s still “an emerging technology that is in its early days in terms of adoption,” Knox cautioned. It’s too early to say how effective confidential computing will be at keeping hackers at bay, as they often take some time to find holes to exploit new technologies. In any case, they’re plenty successful with using relatively simple techniques like sending phishing emails to workers as a way to penetrate corporate computer systems.
Still, Stephen Walli, a Microsoft principal program manager and governing board chair of the CCC, said that confidential computing could help make companies comfortable with doing more complicated data training for their machine-learning models. For instance, two organizations, each possessing their own data sets, could use confidential computing to train a machine-learning model without worrying that the other firm could see their data, Walli said.
Health care companies, which are generally reluctant to share data with each other, could team up on machine-learning projects aimed at discovering new medical treatments, for example.
Cloud computing companies like Google and Microsoft believe confidential computing could be a way to entice businesses to adopt more cloud services, Knox said. By encrypting all of a corporate app’s computing processes—often referred to as workloads—cloud computing vendors can better assure their customers that their apps are secure.
Besides the cloud computing vendors, computer-chip makers are also playing a big role in confidential computing, Knox said. In order for the technique to properly work, chip vendors like AMD and Intel would need to build certain security features into their semiconductors.
Google’s new confidential computing service works on certain AMD processors, but it eventually will work with other computer chips, Potti said during the media briefing.