Security Design For Data Privacy Protection In Development&Testing Cloud Environment Of Commercial Bank

Cloud computing can provide an efficient, scalable, cost-effective IT service mode, thedifferent cloud computing business model provide a strong support for enterprise businessdevelopment and innovation. But flexible, open cloud computing business model brings newpotential security risk. Therefore, the enterprises must make a full risk assessment to theprivacy, confidential business information, and design security framework and implementsecurity techniques to ensure that it meets enterprise risk management strategies and the lawsand regulatory compliance requirements before the enterprise business applications andcritical data moving to the cloud.Development and testing cloud is an typical application as infrastructure cloud (IAAS)in the application system development and testing environment, it solve the problem asefficiency low, cannot realize the automated deployment of testing environment andmonitoring system resource state in the manual environment.However, in the development andtesting cloud environment, the development and testing required that the data extracted fromproduction data, the sensitive data including user privacy in the development and testingprocess may be exposed to the development and testing developer or malicious administrator,bring a serious threat to the user privacy，and violate data privacy compliance requirements.Therefore, this paper will combine the recent two years of project experiences,discussedand summarized the development and testing cloud architecture, cloud computing with thegeneral security considerations, and in the development and testing cloud scene, according tothe compliance requirements of CBRC issued《risk management guidelines for informationtechnology of commercial banks》, focus on data privacy protection technology research andanalysis, in-depth dissertate technical process and difficulty in testing data privacy protectionsolution implementation, show data distortion function design process and key points,summarize data privacy protection product solutions that based on the data distortion/disruptive technology can effectively meet the compliance requirements of data privacyprotection in development and testing cloud.