公共云安全体系结构设计.pdfVIP

第 31 卷第 2 期 吉林大学学报(信息科学版) Vol. 31 No.2 2013 年 3 月 Joumal of Jilin Univer回 ty (Information Science Edition) M町.2013 文章编号: 1671-5896( 2013 )02 ..Q 165 ..Q5 公共云安全体系结构设计 王林松，刘德山，郭 瑾，王洪东 (辽宁师范大学计算机与信息技术学院，辽宁大连 116081) 摘要:针对云计算环境下新型服务模式的引人以及虚拟化技术的使用为信息安全带来一系列新的安全隐患问 题，对公共云的安全性进行研究。从用户安全目标数据的安全性和云服务可用性及性能两方面入手，全面分析 公共云面临的安全威胁。设计了公共云安全参考框架，提出从用户管理、数据安全、数据中心软硬件安全和控 制权转移引发的安全问题加强公共云的安全性，并对云安全评估进行了讨论。实验结果表明，该结构能整体提 高公共安全 A性，抵御各类安全威胁。 关键词:公共云;云安全;云安全框架;云安全评估 中圄分类号 :T凹09 文献标识码 :A Design of Public Cloud Security Architecture WANG Lin-song , LIU De-shan , GUO Jin , WANG Hong-dong (College of Computer and Infonnation Technology , Liaoning Nonnal University , Dalian 116081 , China) Abstract: The new service model and virtualization technology inevitably brings a series of new security problems in cloud computing environment. Security has been regarded as one of the most important issues in the development of cloud computing. To study the safety of the public cloud , from the user security objectives data security and cloud service availability and perfo口nance ， the security threats facing the public cloud was analyzed comprehensively. A public cloud security framework of reference is designed , User management , data security , data center hardware and software security and safety problems caused by the transfer of control are proposed to strengthen public cloud security. Finally , the cloud security evaluation is discussed. Experimental results show that this architecture can improve the safety of the public cloud against all types of security threats. Key words: public cloud; cloud security; cloud security framework; cloud security evaluation o