基于等级保护的云计算安全评估模型  

Model for Cloud Computing Security Assessment Based on Classified Protection

作　　者：姜政伟[1,2] 赵文瑞[1,2] 刘宇[1,2] 刘宝旭[2] 

机构地区：[1]中国科学院研究生院,北京100049 [2]中国科学院高能物理研究所计算中心,北京100049

出　　处：《计算机科学》2013年第8期151-156,共6页Computer Science

基　　金：国家科技支撑计划项目(2012BAH14B02);国家发改委信息安全专项项目(发改办高技[2012]1424号)资助

摘　　要：云计算应用与发展中最受关注的问题之一是安全。针对云计算服务安全水平量化的需求,以我国等级保护测评要求为基础,借鉴欧美相关机构的云计算风险控制与安全评估框架,通过德尔菲法构建云计算安全评估指标体系,使用层次化分析法计算出各指标项的权重。根据设计的指标体系,将模糊综合评判引入对云计算实例的分析。实际应用表明模型能为云平台安全提供有效的量化和与评估。The security topic in application and development of cloud computing is one of the greatest concerns. Aiming at the requirement of security level quantification in cloud computing service, based on classified protection in our coun- try and learned from the cloud computing risk control and security assessment frameworks designed by European and American institutions, a cloud computing security assessment indexes system was built up through Delphi method, and the weight of each index was calculated with analytic hierarchy process. According to this indexes system, fuzzy compre- hensive analysis method was introduced to the evaluation of a cloud computing instance. The case study shows that this model can effectively quantify and assess the security level of cloud platform.

关 键 词：云计算 安全评估 等级保护 层次分析法 模糊综合评价 

分 类 号：TP393[自动化与计算机技术—计算机应用技术]