YOUR PRIVATE CLOUD

Currently, the implementation of a private cloud is basically focused on the protection, mobility and portability of our information, all with the aim of always keeping in mind the security of our data, due to the situation presented with the National Agency Security (NSA) of the United States of America, which is involved in espionage issues to organizations, politicians and individuals, therefore, private and individuals, see this technological solution quite attractive.

Cloud computing has been having a huge boom in these times, due to its innovative proposal, flexibility, security and use of the computing power of server hardware, which offers users an enormous amount of services through from the internet network. Likewise, Cloud Computing offers a promising business model, since it provides a battery of tailored products, guaranteeing the user a product aimed exclusively at their business model.

In the same vein, the implementation of a Private Cloud must have an outlining of points that guarantee its success, that is, it must be seen as a high-impact project, which includes tasks, which in turn are part of some activities and that these at the end result in the launch of our own Cloud Private.

In this sense, proposing a technological solution for the design of our Private Cloud is to venture into a good number of technological solutions oriented to the provision of cloud services, ranging from Apache CloudStack, OpenStack, Ubuntu Eucalyptus, XenServer, VMware vSphere , Proxmox among others. It should be considered that the first thing to take into account is to determine what type of services our cloud will provide, then design the Virtualization Architecture or VM Maps, since it is vitally important to know the IP addressing, Virtual Networks, DMZ, Storage , RAM, VM, Security and Firewalling among others, that guarantee the optimal functioning of the services that our cloud will provide.

The selection of the Virtualization software must be determined by its features, APIs and extensions that enhance the architecture, as well as the quality of the documentation that it possesses, however, the knowledge, domain and expertise of the Cloud Computing Consultant in the technological tool To be selected, it is of importance and value, when it comes to resolving potential support, maintenance, intonation and updating situations. In response to the problems exposed, we can discern that by being the owners and masters of our information, we stop being dependent on third parties for the management and manipulation of our data, expanding the technological infrastructure of our business model to unknown limits.

INFORMATION SECURITY IN THE CLOUD

Organizations have taken seriously the issue of using the cloud as a technological infrastructure for managing their information, however, this decision leads to taking into account the need to mitigate threats that affect the normal operation of our infrastructure on the network. , Currently this point has been evaluated by different specialists in Cloud Computing, the Cloud Security Alliance (CSA), I identify some threats that organizations face in 2016, when protecting their information in the cloud, generating in turn a report with The purpose of helping customers and service providers to focus their defensive efforts against such threats.

These efforts are focused on eliminating security gaps in the data hosted on servers, raising the level of authentication, minimizing the use of APIs and Interfaces that compromise the security of services, performing verification tasks to reduce vulnerabilities in systems, implementing Validation controls to avoid potential account hijackings, limit the abuse of cloud services, among other efforts that minimize our information.

In this same vein, currently providers that provide cloud services, say in their different modalities (software as a service, platform as a service and infrastructure as a service) and in their deployment models (private, public, hybrid, and community). ), have been increasing security levels in data centers, taking as a starting point, the mitigation of threats that put their customers' information at risk.

On the other hand, the responsibility for the security of information in the cloud must be given to both the customer and the service provider, the latter must ensure that the infrastructure offered is secure and that the information of its customers will be safe, Likewise, users, for their part, must take measures to strengthen their applications and use strong passwords and authentication measures, which prevent back doors that are exploited by malicious hackers.

In this sense, cloud service providers must guarantee security through continuous checks in their data centers. Additionally, data centers must be frequently monitored against suspicious activity as this guarantees having early alerts that facilitate the application of timely contingency measures, likewise, providers must provide the correct isolation of their customers' data and define a logical segregation of storage, it is understood that there must be backup policies, with a respective monitoring and control process.