一种基于用户行为信任的云安全访问控制模型  

A Security Access Control Model Based on User Behavior Trust under Cloud Environment

作　　者：宋国峰[1,2] 梁昌勇[1,2] 

机构地区：[1]合肥工业大学管理学院,安徽合肥230009 [2]过程优化与智能决策教育部重点实验室,安徽合肥230009

出　　处：《中国管理科学》2013年第S2期669-676,共8页Chinese Journal of Management Science

基　　金：国家自然科学基金面上项目(71271072;71331002);高校博士点基金项目(20110111110006)

摘　　要：为解决云计算中日益突出的多租户访问过程中的安全问题,本文提出了一种基于用户行为信任的安全访问控制模型。该模型通过实时监测云中海量用户的访问行为,获取用户行为证据,并引入基于模糊一致矩阵的AHP综合评估用户行为信任度,建立基于行为信任等级的用户服务等级动态分配机制,不仅能够有效控制用户的非安全访问行为,保护云中的重要资源,而且通过对用户行为信任状态的实时反馈,有助于建立用户与云服务之间的长期信任机制。本文给出了该模型的具体结构、工作原理以及用户行为信任评估、云服务等级动态分配的详细过程及实例。In order to solve the security problem of multi- tenant access process in cloud computing,a security access control model is proposed based on user behavior trust under cloud environment.The model obtains the evidence of relevant security behavior by real- time monitoring the mass user access behavior under cloud environment.Meanwhile,the model introduces the analytic hierarchy process based on fuzzy consistent matrix(fuzzy AHP)to evaluate the user behavior trust comprehensively,and builds a user dynamic allocation mechanism based on behavior trust level,which not only can control user unsafe access behavior effectively to protect important resources in the cloud,but also can help to establish long- term trust mechanism between the users and the cloud service by the real- time feedback of the user behavior trust condition.Additionally,physical structure,operation principle,trust evaluation of the user behavior,the detailed process and examples of dynamic allocation of cloud service level of the model are all given in this paper.

关 键 词：云计算 安全访问控制 用户行为信任 信任评估 行为证据 模糊一致矩阵 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]