公共云安全体系结构设计

针对云计算环境下新型服务模式的引入以及虚拟化技术的使用为信息安全带来一系列新的安全隐患问题, 对公共云的安全性进行研究。从用户安全目标数据安全性和云服务可用性及性能两方面入手, 全面分析公共云面临的安全威胁。设计了公共云安全参考框架, 提出从用户管理、 数据安全、 数据中心软硬件安全和控制权转移引发的安全问题加强公共云安全性。最后对云安全评估进行了讨论。实验结果表明, 该结构能整体提高公共安全性, 抵御各类安全威胁。

Design of Public Cloud Security Architecture

The new service model and virtualization technology inevitably brings a series of new security problems in cloud computing environment. Securityhas been regarded as one of the most important issues in the development of cloud computing. To study the safety of the public cloud, from the user security objectives data security and cloud service availability and performance, the security threats facing the public cloud was analyzed comprehensively. A public cloud security framework of reference is designed, User management, data security, data center hardware and software security and safety problems caused bythe transfer of control are proposed to strengthen public cloud security. Finally, the cloud security evaluation is discussed. Experimental results show that this architecture can improve the safety of the public cloud against all types of security threats.