1、 XChain 技術團隊展開內部會議，就遠程辦公中的數據安全問題進行探討
XChain technical team launches internal meeting to discuss data security issues in remote office
**
**
對於大多數人來說 , 在新型冠狀病毒的影響下 , 亞洲地區許多國家和區域選擇遠程辦公是迫於當前形勢不得已而爲之 , 但並不排除它會是未來的一種趨勢 , 尤其對於產品研發這類工作 , 遠程的效率可能會更高 . 在本週 XChain 技術部門舉行的業務溝通會議上 , 大家就遠程辦公中的數據安全問題進行了探討
For most people,under the influence of the new coronavirus, remote office in some Asian countries and regions is compelled by the current situation,but it does not rule out that it will be a future trend, especially for work such as product development It may be more efficient.At the business communication meeting held by XChain\’s technical department this week, everyone discussed the data security issues in remote office
對於互聯網企業來說 , 遠程辦公並不陌生 , 但是對於大量傳統行業人員來說 , 突然性的大規模遠程辦公應用會帶來一系列嚴重的安全問題 , 尤其是大量隱私和數據安全問題 . 因爲突然性的全員遠程辦公 , 意味着大量企業內部人員需要從企業安全邊界外部 (包括家中或者不安全的 WiFi 熱點) 訪問任何能夠維持正常工作的賬戶 , 文檔或數據 . 而如果相關網絡安全措施 , 規則和培訓沒有隨之調整 , 將產生巨大的安全隱患
For Internet companies,remote office is no longer a stranger,but to a large number of traditional industry, large-scale remote office applications will bring a series of serious security issues,especially a large number of privacy and data security issues.Because of the telecommuting,it means that a large number of internal personnel need to access any account,documents or data that can maintain normal work from outside the corporate security boundary (including at home or unsecured WiFi hotspots).If relevant network security measures, rules,and training are not adjusted accordingly, huge security risks will arise
以下這些舉措 , 則可以確保遠程辦公數據安全 . 首先是對員工進行數據安全的相關教育 . 最好在全面啓動遠程辦公前召開全體會議或向公司手冊中添加安全意識相關內容 , 以免員工的意識出現盲點 . 即使員工分佈在全球各地 , 也需要利用協作工具召集所有人集中一段時間培訓 , 以確保每個人都可以理解遠程團隊面臨的諸多安全風險
The following measures can ensure the security of remote office data.The first is to educate employees about data security.It is best to hold a plenary meeting or add security awareness related content to the company manual before the remote office is fully launched,so as to avoid blind spots in employee awareness.Even if employees are located around the world,collaboration tools are needed to bring everyone together for a period of training to ensure that everyone can understand the many security risks facing remote teams
其次是確保使用 VPN. 無論您連接的是哪種 WiFi,VPN 都可以通過安全連接來提高數據通訊的安全 . 保護遠程團隊的活動 , 數據 , 信息和密碼免遭各種埋伏在公共 WiFi 網絡中的不懷好意的（中間）攻擊者窺視和竊取 . 市場上有大量便宜 , 靠譜的商業 VPN 可用 , 對用戶數據記錄有嚴格的承諾 , 可以輕鬆化解公共網絡的安全風險
The second is to make sure use VPN.No matter what kind of WiFi you are connected to,VPN can improve the security of data communication through a secure connection. Protect the activities, data, information,and passwords of remote teams from being snooped and stolen by various malicious (middle) attackers ambushing in public WiFi networks.There are a large number of cheap and reliable commercial VPNs available in the market,with strict commitments to user data records, which can easily resolve the security risks of public networks
第三 , 儘可能使用雙因素認證 . 在您所屬的任何遠程團隊中 , 雙因素認證都必須是強制性的 , 對於高價值和高風險目標則需要啓用硬件密鑰或生物認證 . 如果你重點防護的員工沒有或者忘記了硬件密鑰 , 那麼快遞密鑰將會是一個很重要的應急戰術動作
Third, use 2FA whenever possible.Two-factor authentication must be mandatory in any remote team you belong to,and hardware keys or bio-metric authentication need to be enabled for high-value and high-risk targets.If your key employees do not have or forget the hardware key,then the express key will be an important emergency tactical action.
總而言之 , 在遠程辦公的大環境下 , 企業必須對數據的安全格外重視 , 才能確保不發生額外的損失 , 確保各項工作能夠安全有序的進行
All in all, in the context of remote work, companies must pay attention to the security of their data in order to ensure that no additional losses occur and that all tasks can be carried out safely and orderly
_
_
2、XChain 倫敦團隊和當地互聯網小企業共同分享在數據中心中網絡流量的採集和應用
XChain London team and local small Internet companies share the methods of collect and application of network traffic in the data center
**
**
本週 XChain 倫敦團隊再次參加創新孵化營的活動 , 和許多來自孵化營的互聯網企業探討流量抓取的重要性 .XChain 和當地互聯網小企業共同分享在數據中心中網絡流量的採集和應用
This week,XChain London team participated in the innovation incubation camp and discussed the importance of traffic capture with many Internet companies from the incubation camp.XChain and local Internet small businesses shared the collection and application of network traffic in the data center
隨着數據中心網絡規模擴大 , 承載應用系統越來越豐富 , 運維精細化要求不斷提高 , 網絡流量採集分析已經成爲數據中心基礎設施不可缺少的分析手段 . 然而數據中心的流量採集正面臨着包括採集需求多樣化 , 處理需求複雜化 , 流量探針限制 , 數據安全及合規在內的諸多的需求挑戰
With the expansion of the data center network,the bearer application system is becoming more and more abundant,and the requirements for refined operation and maintenance are constantly increasing.Network traffic collection and analysis has become an indispensable analysis method for data center infrastructure.However,data center traffic collection is facing many challenges including persified collection requirements,complex processing requirements,flow probe restrictions,data security,and so on
在 XChain 看來 , 挑戰之一便是數據安全及合規 . 隨着數據中心安全防護體系的不斷深入 , 流量採集和分析的應用場景需求不斷增加 . 例如全網流量可視化與動態分析 , 互聯網應用安全防護 , 雲安全等 . 另一方面 , 網絡承載着客戶業務的重要數據 , 如何能對數據進行安全合規使用 , 避免信息泄露 , 也是在進行採集網絡規劃建設時需重點考慮的問題 . 例如對於部分重要的生產網絡流量數據 , 需要進行脫敏處理 , 隱藏客戶敏感信息 , 避免信息泄露
For XChain,one of the challenges is data security and compliance.With the continuous deepening of the data center security protection system,the demand for application scenarios for traffic collection and analysis is increasing.For example,network-wide traffic visualization and dynamic analysis,Internet application security protection,and cloud security.On the other hand,the network carries important data of customer services.How to use the data in a safe and compliant manner to avoid information leakage is also an important issue to be considered when collecting network planning and construction. For example,for some important production network traffic data, desensitization processing needs to be performed to hide sensitive customer information to avoid information leakage
那麼 XChain 認爲 , 可行的解決方案是通過實施分佈式網絡流量採集系統 , 實現對雙活數據中心內的各個業務區域流量分佈採集 , 集中梳理 . 同時也能夠提供面向不同業務的數據採集 , 去重 , 切片 , 脫敏 , 分發 , 篩選 , 複製和負載均衡 , 並按需進行網絡數據包重構 , 有助於進行網絡規劃 , 網絡優化 , 網絡監測 , 業務流量趨勢分析 , 網絡故障定位等工作 , 保障網絡的正常 , 穩定 , 可靠運行 , 實現全網流量可視化和流量精細化管理
Then XChain believes that a feasible solution is to implement a distributed network traffic collection system to realize the collection and centralized collection of traffic in each business area in the active data center.At the same time, it can also provide data collection,deduplication,slicing,desensitization, distribution,screening,replication,and load balancing for different services, and network packet reconstruction on demand,which is helpful for network planning,network optimization,and network monitoring, business traffic trend analysis, network fault location,etc.To ensure the normal,stable, and reliable operation of the network,and realize network-wide traffic visualization and refined traffic management
總而言之 , 流量採集網的建立擴展了網絡流量採集廣度 , 通過對數據的各類加工 , 一定程度上提高了數據利用效率 . 隨着各類數據分析需求的發展 , 後續數據流量採集將與各類分析應用平臺聯動 , 從不同角度挖掘數據信息 , 對數據進行深入分析 , 支持運維業務發展
All in all,the establishment of a traffic collection network has expanded the breadth of network traffic collection.Through various types of data processing,the data utilization efficiency has been improved to a certain extent.With the development of various types of data analysis needs,subsequent data traffic collection will be linked with various analysis application platforms to mine data information from different angles,conduct in-depth analysis of the data,and support the development of operation and maintenance services
_
_
3、本週技術部分更新 Technical updates of this week
重構輕節點以更好適配 , 新增區塊同步模式和事務同步模式
Restructure light nodes for better adaptation, and add block synchronization mode and transaction synchronization mode
完善部分交互設計功能
Improve some interaction design functions
_
_
*備註說明： XChain 專指於 2016 年在新加坡成立的 XChain 基金會團隊**
歡迎掃碼關注 XChain 微信官方社區
Sweep the Code to Follow XChain Official Wechat Community
繁體中文
简体中文
English
日本語
Español