想知道谁能在云中查看我的源代码/数据 [英] Wondering who gets to see my source/data in the cloud

问题描述

让我们假设我有一些我不想偷的想法，我愿意付出合理的代价。

有这样的例子：
http://www.pcmag.com/article2/0,2817 ，2369188,00.asp
或Facebook故事，或早期的苹果/施乐公司的故事。

这可能发生在ec2等云服务中，heroku，linode，azure等。

假设我有很好的解释/编译代码组合，我该如何保护我的源代码和想法免于被盗？我知道我不是很富有，也没有一些源头上的盗贼。我只是对将源代码放到云中感到这种唠叨的感觉，我相信你们中的一些人也有或不在乎。

磁盘加密是否有帮助？我的选择是什么（除了构建我自己的迷你数据中心？）

解决方案

如果您将代码托管在云中有一点你需要信任你的主机。否则，你会自己做主机。诚然，任何拥有代码的主机都可以获取代码并使用它，但是如果您选择的主机看起来值得信赖，并且拥有良好的声誉和许多其他满意的客户，则可能会保证您的代码安全。

在磁盘上加密内容可能会有帮助 - 这取决于您加密的内容以及如何使用它。您是否需要在某个时间点将您的数据解密以解决问题？您的数据是否只能从一个地方转移到另一个地方？如果对手持有您的数据会造成多大的损失？

您可能对这个答案，其中概述了几个选项。

Let us assume I have few ideas that I don't want stolen and I am willing to pay a reasonable price.

There are instances like this: http://www.pcmag.com/article2/0,2817,2369188,00.asp or the facebook story, or the early apple/xerox story.

which could happen in cloud services like ec2, heroku, linode, azure etc.

Assuming I have a good mix of interpreted/compiled code, how can I protect my source and ideas from being stolen? I know I am not really idea rich nor is there some source thief on the loose. I just have this nagging feeling about putting source code in the cloud, which I am sure some of you also have or didn't care much about.

Would disk encryption help? What are my choices (other than building my own mini data center?)

解决方案

If you are hosting your code in the cloud at some point you will need to trust your host. Otherwise you'll be doing the hosting yourself. True, any host that has your code may be able to take the code and use it, but if you choose a host that seems trustworthy, has a good reputation, and many other satisfied customers you can probably wager that your code will be secure.

Encrypting things on disk might help - it depends what you're encrypted and how you use it. Do you need your data to be unencrypted at some point to work on it? Is your data only transferred from one place to another? How much damage could an adversary do if they got a hold of your data?

You may be interested in this answer, which outlines several options.

这篇关于想知道谁能在云中查看我的源代码/数据的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！