医疗云计算技术与信息安全等级保护.pdfVIP

特别专题 Exclusive Subject 网络大会获奖论文选登 网络大会获奖论文选登 医疗云计算技术与信息安全等级保护 ① ② ② 陈伟 王强 袁天祥 摘 要 随着现代信息技术的发展，医疗机构采用云计算技术进行信息化建设成为可能。但按照等级保护的基本要求，对云 计算信息系统难以有效开展信息安全等级保护测评。以云安全服务模型参考，并以云安全管理中心为例，对云计算信息系 统进行云安全等级保护建模和云安全建模，并将二者进行嵌套。针对嵌套的云计算信息系统模型进行等级保护控制项细粒 度分析和风险分析，从而完成云计算信息系统的信息安全等级保护测评工作，为医疗机构采用云计算进行信息化建设并同 时做好信息安全等级保护提供参考。 关键词 医疗机构 信息安全等级保护测评 云计算技术 云安全服务模型 云安全管理中心 Doi:10.3969/j.issn.1673-7571.2014.08.009 [中图分类号] TP393 [文献标识码] A Medical Cloud Computing Technology and Information Security Level Protection / CHEN Wei, WANG Qiang, YUAN Tian- xiang//China Digital Medicine.-2014 9(8): 26 to 28 Abstract With the development of modern information technology, it is possible for medical organizations to use cloud computing technology for informatization construction. But according to the basic requirements of level protection, it is difficult to effectively carry out information security level protection evaluation for cloud computing information system. With cloud security service model as the reference and with cloud security management center as an example, cloud security level protection modeling and cloud security model are carried out and nested for cloud computing information system. For the nested cloud computing information system model, fine-grained analysis and risk analysis of level protection control items are conducted, so as to complete the information security level protection evaluation of cloud computing information system and provide reference for medical organizations informatization construction with cloud computing and information security level protection. Keywords medical organizations, protection and evaluation of information security level, cloud computing technology, cloud