Draft: Cloud Native Security White Paper Chinese Edition 2

[rootsongjc]

Ref: #1055

[netlify]

✅ Deploy Preview for tag-security canceled.

Name	Link
🔨 Latest commit	70fc400
🔍 Latest deploy log	https://app.netlify.com/sites/tag-security/deploys/64c87145f9a3680008842c4b

[windsonsea]

Truly admire the exceptional work that showcases a profound understanding and unwavering enthusiasm for cloud-native technology!

[hwang37]

Thanks for the bilingual translation effort!
Do you think it's a good idea to add a new session to list the acronym, name and translation?

I collect some acronym used in the PR:

ABAC: Attribute-Based Access Control
AES: Advanced Encryption Standard
AI: Artificial Intelligence
API: Appliation Programming Interface
BYOK: Bring Your Own Key
CA: Certificate Authority
CaaS: Containers-as-a-Service
CD: Continuous Delivery
CI: Continuous Integration
CIS: Center for Internet Security
CISO: Chief (Information) Security Officer
CMK: Customer Master Key
CNCF: Cloud Native Computing Foundation
CTO: Chief Technology Officer
CVE: Common Vulnerabilities and Exposures
CVSS: Common Vulnerability Scoring System
DAAS: data, assets, applications, and services
DAST: Dynamic Application Security Testing
DDoS: Distributed Denial of Service
DEK: Data Encryption Key
DoS: Denial of Service
EBA: European Banking Authority
EIOPA: European Insurance and Occupational Pensions Authority
ESMA: European Securities and Markets Authority
Faas: Functions-as-a-Service
GID: Group identifier
HSM: Hardware Security Modules
IaaS: Infrastructure as a Service
IaC: Infrastructure as Code
IAM: Identity and Access Management
IDE: Integrated Development Environment
KMS: Key Management System
MAC: Mandatory Access Control
ML: Machine Learning
NFS: Network File System
OCI: Open Container Initiative
OPAL: Opal Storage Specification
OWASP: Open Web Application Security Project
PaaS: Platform as a Service
RBAC: Role-based Access Control
ROI: Return On Investment
SAST: Static Application Security Testing
SBOMs: Software Bill of Materials
SOC: System On Chip
SoD: Separation of duties
SSD: Solid-State Drive
TEE: Trusted Execution Environments
TLS: Transport Layer Security
TPM: Trusted Platform Module
UID: Unique Identifier
VEX: Vulnerability Exploitability eXchange
VM: Virtual Machine
VPN: Virtual Private Network

[rootsongjc]

Thanks for the bilingual translation effort! Do you think it's a good idea to add a new session to list the acronym, name and translation?

I collect some acronym used in the PR:

ABAC: Attribute-Based Access Control AES: Advanced Encryption Standard AI: Artificial Intelligence API: Appliation Programming Interface BYOK: Bring Your Own Key CA: Certificate Authority CaaS: Containers-as-a-Service CD: Continuous Delivery CI: Continuous Integration CIS: Center for Internet Security CISO: Chief (Information) Security Officer CMK: Customer Master Key CNCF: Cloud Native Computing Foundation CTO: Chief Technology Officer CVE: Common Vulnerabilities and Exposures CVSS: Common Vulnerability Scoring System DAAS: data, assets, applications, and services DAST: Dynamic Application Security Testing DDoS: Distributed Denial of Service DEK: Data Encryption Key DoS: Denial of Service EBA: European Banking Authority EIOPA: European Insurance and Occupational Pensions Authority ESMA: European Securities and Markets Authority Faas: Functions-as-a-Service GID: Group identifier HSM: Hardware Security Modules IaaS: Infrastructure as a Service IaC: Infrastructure as Code IAM: Identity and Access Management IDE: Integrated Development Environment KMS: Key Management System MAC: Mandatory Access Control ML: Machine Learning NFS: Network File System OCI: Open Container Initiative OPAL: Opal Storage Specification OWASP: Open Web Application Security Project PaaS: Platform as a Service RBAC: Role-based Access Control ROI: Return On Investment SAST: Static Application Security Testing SBOMs: Software Bill of Materials SOC: System On Chip SoD: Separation of duties SSD: Solid-State Drive TEE: Trusted Execution Environments TLS: Transport Layer Security TPM: Trusted Platform Module UID: Unique Identifier VEX: Vulnerability Exploitability eXchange VM: Virtual Machine VPN: Virtual Private Network

Done

[anvega]

Approving based on the reviews of others