XChain 项目周报(2 月 3 日-2 月 9 日)

1、 XChain 技术团队展开内部会议,就远程办公中的数据安全问题进行探讨

XChain technical team launches internal meeting to discuss data security issues in remote office

**
**

对于大多数人来说 , 在新型冠状病毒的影响下 , 亚洲地区许多国家和区域选择远程办公是迫于当前形势不得已而为之 , 但并不排除它会是未来的一种趋势 , 尤其对于产品研发这类工作 , 远程的效率可能会更高 . 在本周 XChain 技术部门举行的业务沟通会议上 , 大家就远程办公中的数据安全问题进行了探讨

For most people,under the influence of the new coronavirus, remote office in some Asian countries and regions is compelled by the current situation,but it does not rule out that it will be a future trend, especially for work such as product development It may be more efficient.At the business communication meeting held by XChain's technical department this week, everyone discussed the data security issues in remote office

XChain 项目周报(2 月 3 日-2 月 9 日)

对于互联网企业来说 , 远程办公并不陌生 , 但是对于大量传统行业人员来说 , 突然性的大规模远程办公应用会带来一系列严重的安全问题 , 尤其是大量隐私和数据安全问题 . 因为突然性的全员远程办公 , 意味着大量企业内部人员需要从企业安全边界外部 (包括家中或者不安全的 WiFi 热点) 访问任何能够维持正常工作的账户 , 文档或数据 . 而如果相关网络安全措施 , 规则和培训没有随之调整 , 将产生巨大的安全隐患

For Internet companies,remote office is no longer a stranger,but to a large number of traditional industry, large-scale remote office applications will bring a series of serious security issues,especially a large number of privacy and data security issues.Because of the telecommuting,it means that a large number of internal personnel need to access any account,documents or data that can maintain normal work from outside the corporate security boundary (including at home or unsecured WiFi hotspots).If relevant network security measures, rules,and training are not adjusted accordingly, huge security risks will arise

XChain 项目周报(2 月 3 日-2 月 9 日)

以下这些举措 , 则可以确保远程办公数据安全 . 首先是对员工进行数据安全的相关教育 . 最好在全面启动远程办公前召开全体会议或向公司手册中添加安全意识相关内容 , 以免员工的意识出现盲点 . 即使员工分布在全球各地 , 也需要利用协作工具召集所有人集中一段时间培训 , 以确保每个人都可以理解远程团队面临的诸多安全风险

The following measures can ensure the security of remote office data.The first is to educate employees about data security.It is best to hold a plenary meeting or add security awareness related content to the company manual before the remote office is fully launched,so as to avoid blind spots in employee awareness.Even if employees are located around the world,collaboration tools are needed to bring everyone together for a period of training to ensure that everyone can understand the many security risks facing remote teams

XChain 项目周报(2 月 3 日-2 月 9 日)

其次是确保使用 VPN. 无论您连接的是哪种 WiFi,VPN 都可以通过安全连接来提高数据通讯的安全 . 保护远程团队的活动 , 数据 , 信息和密码免遭各种埋伏在公共 WiFi 网络中的不怀好意的(中间)攻击者窥视和窃取 . 市场上有大量便宜 , 靠谱的商业 VPN 可用 , 对用户数据记录有严格的承诺 , 可以轻松化解公共网络的安全风险

The second is to make sure use VPN.No matter what kind of WiFi you are connected to,VPN can improve the security of data communication through a secure connection. Protect the activities, data, information,and passwords of remote teams from being snooped and stolen by various malicious (middle) attackers ambushing in public WiFi networks.There are a large number of cheap and reliable commercial VPNs available in the market,with strict commitments to user data records, which can easily resolve the security risks of public networks

XChain 项目周报(2 月 3 日-2 月 9 日)

第三 , 尽可能使用双因素认证 . 在您所属的任何远程团队中 , 双因素认证都必须是强制性的 , 对于高价值和高风险目标则需要启用硬件密钥或生物认证 . 如果你重点防护的员工没有或者忘记了硬件密钥 , 那么快递密钥将会是一个很重要的应急战术动作

Third, use 2FA whenever possible.Two-factor authentication must be mandatory in any remote team you belong to,and hardware keys or bio-metric authentication need to be enabled for high-value and high-risk targets.If your key employees do not have or forget the hardware key,then the express key will be an important emergency tactical action.

XChain 项目周报(2 月 3 日-2 月 9 日)

总而言之 , 在远程办公的大环境下 , 企业必须对数据的安全格外重视 , 才能确保不发生额外的损失 , 确保各项工作能够安全有序的进行

All in all, in the context of remote work, companies must pay attention to the security of their data in order to ensure that no additional losses occur and that all tasks can be carried out safely and orderly

_
_

2、XChain 伦敦团队和当地互联网小企业共同分享在数据中心中网络流量的采集和应用

XChain London team and local small Internet companies share the methods of collect and application of network traffic in the data center

**
**

本周 XChain 伦敦团队再次参加创新孵化营的活动 , 和许多来自孵化营的互联网企业探讨流量抓取的重要性 .XChain 和当地互联网小企业共同分享在数据中心中网络流量的采集和应用

This week,XChain London team participated in the innovation incubation camp and discussed the importance of traffic capture with many Internet companies from the incubation camp.XChain and local Internet small businesses shared the collection and application of network traffic in the data center

XChain 项目周报(2 月 3 日-2 月 9 日)

随着数据中心网络规模扩大 , 承载应用系统越来越丰富 , 运维精细化要求不断提高 , 网络流量采集分析已经成为数据中心基础设施不可缺少的分析手段 . 然而数据中心的流量采集正面临着包括采集需求多样化 , 处理需求复杂化 , 流量探针限制 , 数据安全及合规在内的诸多的需求挑战

With the expansion of the data center network,the bearer application system is becoming more and more abundant,and the requirements for refined operation and maintenance are constantly increasing.Network traffic collection and analysis has become an indispensable analysis method for data center infrastructure.However,data center traffic collection is facing many challenges including persified collection requirements,complex processing requirements,flow probe restrictions,data security,and so on

XChain 项目周报(2 月 3 日-2 月 9 日)

在 XChain 看来 , 挑战之一便是数据安全及合规 . 随着数据中心安全防护体系的不断深入 , 流量采集和分析的应用场景需求不断增加 . 例如全网流量可视化与动态分析 , 互联网应用安全防护 , 云安全等 . 另一方面 , 网络承载着客户业务的重要数据 , 如何能对数据进行安全合规使用 , 避免信息泄露 , 也是在进行采集网络规划建设时需重点考虑的问题 . 例如对于部分重要的生产网络流量数据 , 需要进行脱敏处理 , 隐藏客户敏感信息 , 避免信息泄露

For XChain,one of the challenges is data security and compliance.With the continuous deepening of the data center security protection system,the demand for application scenarios for traffic collection and analysis is increasing.For example,network-wide traffic visualization and dynamic analysis,Internet application security protection,and cloud security.On the other hand,the network carries important data of customer services.How to use the data in a safe and compliant manner to avoid information leakage is also an important issue to be considered when collecting network planning and construction. For example,for some important production network traffic data, desensitization processing needs to be performed to hide sensitive customer information to avoid information leakage

XChain 项目周报(2 月 3 日-2 月 9 日)

那么 XChain 认为 , 可行的解决方案是通过实施分布式网络流量采集系统 , 实现对双活数据中心内的各个业务区域流量分布采集 , 集中梳理 . 同时也能够提供面向不同业务的数据采集 , 去重 , 切片 , 脱敏 , 分发 , 筛选 , 复制和负载均衡 , 并按需进行网络数据包重构 , 有助于进行网络规划 , 网络优化 , 网络监测 , 业务流量趋势分析 , 网络故障定位等工作 , 保障网络的正常 , 稳定 , 可靠运行 , 实现全网流量可视化和流量精细化管理

Then XChain believes that a feasible solution is to implement a distributed network traffic collection system to realize the collection and centralized collection of traffic in each business area in the active data center.At the same time, it can also provide data collection,deduplication,slicing,desensitization, distribution,screening,replication,and load balancing for different services, and network packet reconstruction on demand,which is helpful for network planning,network optimization,and network monitoring, business traffic trend analysis, network fault location,etc.To ensure the normal,stable, and reliable operation of the network,and realize network-wide traffic visualization and refined traffic management

XChain 项目周报(2 月 3 日-2 月 9 日)

总而言之 , 流量采集网的建立扩展了网络流量采集广度 , 通过对数据的各类加工 , 一定程度上提高了数据利用效率 . 随着各类数据分析需求的发展 , 后续数据流量采集将与各类分析应用平台联动 , 从不同角度挖掘数据信息 , 对数据进行深入分析 , 支持运维业务发展

All in all,the establishment of a traffic collection network has expanded the breadth of network traffic collection.Through various types of data processing,the data utilization efficiency has been improved to a certain extent.With the development of various types of data analysis needs,subsequent data traffic collection will be linked with various analysis application platforms to mine data information from different angles,conduct in-depth analysis of the data,and support the development of operation and maintenance services

_
_

3、本周技术部分更新 Technical updates of this week

重构轻节点以更好适配 , 新增区块同步模式和事务同步模式

Restructure light nodes for better adaptation, and add block synchronization mode and transaction synchronization mode

完善部分交互设计功能

Improve some interaction design functions

_
_

*备注说明: XChain 专指于 2016 年在新加坡成立的 XChain 基金会团队


欢迎扫码关注 XChain 微信官方社区

Sweep the Code to Follow XChain Official Wechat Community

XChain 项目周报(2 月 3 日-2 月 9 日)