信息安全研究 ›› 2019, Vol. 5 ›› Issue (4): 287-292.

• 学术论文 • 上一篇    下一篇

云计算安全模型与架构研究

王勇1,徐衍龙2,刘强2   

  1. 1. 杭州安恒信息技术股份有限公司北京100088
    2. 杭州安恒信息技术股份有限公司
  • 收稿日期:2019-04-08 出版日期:2019-04-15 发布日期:2019-04-08
  • 通讯作者: 王勇
  • 作者简介:王勇 (1984-),男,学士,高级咨询顾问,主要研究方向为信息安全,等级保护,云计算安全 y.wang@dbappsecurity.com.cn 徐衍龙 (1983-),男,学士,高级咨询顾问,主要研究方向为信息安全,等级保护,云安全管理体系 yanlong.xu@dbappsecurity.com.cn 刘强 (1984-),男,学士,高级咨询顾问,主要研究方向为信息安全,等级保护 qiang.liu@dbappsecurity.com.cn

Cloud Computing Security Model and Architecture Research

  • Received:2019-04-08 Online:2019-04-15 Published:2019-04-08

摘要: 云计算被认为是继大型计算机、个人计算机、互联网之后的第4次IT革命,云计算技术为大数据、物联网、工业物联网、AI人工智能等众多新技术、新应用提供了弹性可扩展的计算能力.与传统信息系统相比,云计算有其自身的特点和特殊性,也会带来一些新的安全风险和问题,如何保障云计算安全成为摆在安全研究人员面前的难题.分析了现阶段云计算面临的安全风险,解析了目前国际和国内较为成熟的云安全模型,最终研究设计了保障云计算安全的技术架构,供云安全相关人员参考.

关键词: 云计算, 云安全风险, 等级保护, 云计算安全模型, 云计算安全架构

Abstract: Cloud computing is considered to be the fourth IT revolution after large computers, personal computers, and the Internet. Cloud computing technology provides flexible and scalable computing capabilities for many new technologies and applications such as big data, Internet of Things, industrial Internet of things, and AI artificial intelligence. Compared with traditional information systems, cloud computing has its own characteristics and particularities, and it will bring some new security risks and problems. How to ensure cloud computing security has become a difficult problem for security personnel. This paper analyzes the security risks faced by cloud computing at this stage, analyzes the current mature cloud security models at home and abroad, and finally designs a technical architecture to ensure cloud computing security for cloud security related personnel.

Key words: cloud computing, cloud security risk, cybersecurity classified protection, cloud computing security model, cloud computing security architecture