Abstract: Assess the possible risks for the various areas of information security is a very important part, and it runs through the entire process of building information systems in the environment of cloud computing. With the progress of the times, to protect the users data security and to prevent risk related technology is already a very important research topic at the present. And, improving risk analysis and research for technology users are very necessary for the security of critical information systems, and the development of cloud computing and security industry. Firstly, make a brief summary to the assets of the cloud computing environment, threats and vulnerabilities, and lead to definitions and categories about technical risk for users, and propose solutions to avoid the risk.

摘要： 云计算环境下，针对信息安全各个领域内可能出现的风险进行评估是一项非常重要的环节，它贯穿于整个信息系统建设过程中.随着时代的进步，保护好用户的数据安全并对相关技术风险进行防范已经是当下十分重要的一个研究课题.并且，完善针对用户的技术风险的分析与研究，对于保障重要信息系统的安全、推进云计算及其安全产业的发展，都是十分必要的.首先通过对云计算环境的资产、威胁和脆弱性进行简单的介绍概括，然后引出针对用户的技术风险的定义与类别，并对风险的规避提出了一些解决方法.