信息安全研究 ›› 2017, Vol. 3 ›› Issue (4): 344-352.

• 学术论文 • 上一篇    下一篇

基于第三方监管的可信云服务评估

杜瑞忠   

  1. 河北大学计算机科学与技术学院河北保定071002
  • 收稿日期:2017-04-13 出版日期:2017-04-13 发布日期:2017-04-13
  • 通讯作者: 杜瑞忠
  • 作者简介:杜瑞忠 博士,教授,硕士生导师,主要研究方向为可信计算与信息安全.

Evaluation of Trusted Cloud Services Based on ThirdParty Regulation

  • Received:2017-04-13 Online:2017-04-13 Published:2017-04-13

摘要: 云服务作为依托于云计算平台的新型网络服务已得到广泛应用.其外包服务模式下的安全风险以及“payasyougo”模式下带来的欺诈性行为也引起了用户对于云服务信任问题,云服务可信性的高低已经成为用户是否向云端迁移数据的基础.针对目前云服务鱼龙混杂的情况,结合云服务特征,提出一种基于第三方监管双向信任的可控云计算平台安全监管服务评估模型,引入体验偏好,根据层次化评价、模糊数学综合评判决策为用户筛选、推荐出既可信又符合用户体验的云服务,同时保证整个云计算平台的安全.实验表明,该模型可以有效地提高交易成功率以及用户整体满意程度,对恶意实体的欺诈行为具有一定的抵御能力.

关键词: 可信云服务, 第三方信任监管, 云服务选择, 信任评估, 云计算

Abstract: As a kind of new network services relying on cloud computing platform, cloud services have been widely applied in many areas. However, security risks under the outsourcing service mode and fraudulent activity under “payasyougo” mode also raise trust issues on cloud services. Now, the level of cloud services credibility has become the basis on whether the users tend to migrate their data to the clouds. Considering the current cloud services chaos, this paper proposes a security service valuation model of the controllable cloud computing platform based on the third party supervise and twoway trust. In order to provide both credible and available cloud services for the users, this paper also introduces comprehensive estimation in which the users experience preference depends on analytic hierarchy process and fuzzy mathematics, and ensures the security of the whole cloud computing platform. Experiment shows that the model can not only effectively improve the transaction success rate and the overall level of user satisfaction, but also resist some fraudulent activities caused by malicious entities to some extent.

Key words: trusted cloud services, thirdparty trusted regulation, cloud service selection, trust evaluation, cloud computing