J4 ›› 2013, Vol. 31 ›› Issue (2): 165-169.

• 论文 • 上一篇    下一篇

公共云安全体系结构设计

王林松, 刘德山, 郭瑾, 王洪东   

  1. 辽宁师范大学 计算机与信息技术学院, 辽宁 大连 116081
  • 收稿日期:2012-04-26 出版日期:2013-03-23 发布日期:2013-06-05
  • 作者简介:王林松(1972—), 男, 辽宁大连人, 辽宁师范大学讲师, 主要从事网络安全理论与技术研究,(Tel)86-15998633859(E-mail)dl_wls@163.com。

Design of Public Cloud Security Architecture

WANG Lin-song, LIU De-shan, GUO Jin, WANG Hong-dong   

  1. College of Computer and Information Technology, Liaoning Normal University, Dalian 116081, China
  • Received:2012-04-26 Online:2013-03-23 Published:2013-06-05

摘要:

针对云计算环境下新型服务模式的引入以及虚拟化技术的使用为信息安全带来一系列新的安全隐患问题, 对公共云的安全性进行研究。从用户安全目标数据安全性和云服务可用性及性能两方面入手, 全面分析公共云面临的安全威胁。设计了公共云安全参考框架, 提出从用户管理、 数据安全、 数据中心软硬件安全和控制权转移引发的安全问题加强公共云安全性。最后对云安全评估进行了讨论。实验结果表明, 该结构能整体提高公共安全性, 抵御各类安全威胁。

关键词: 公共云, 云安全, 云安全框架, 云安全评估

Abstract:

The new service model and virtualization technology inevitably brings a series of new security problems in cloud computing environment. Security has been regarded as one of the most important issues in the development of cloud computing. To study the safety of the public cloud, from the user security objectives data security and cloud service availability and performance, the security threats facing the public cloud was analyzed comprehensively. A public cloud security framework of reference is designed, User management, data security, data center hardware and software security and safety problems caused by the transfer of control are proposed to strengthen public cloud security. Finally, the cloud security evaluation is discussed. Experimental results show that this architecture can improve the safety of the public cloud against all types of security threats.

Key words: public cloud, cloud security, cloud security framework, cloud security evaluation

中图分类号: 

  • TP309