基于等级保护策略的云计算安全风险评估  

Cloud Computing Security Risk Assessment Based on Level Protection Strategy

作　　者：朱圣才[1] 徐御[1] 金铭彦 盛璐[1] 

机构地区：[1]上海市信息安全测评认证中心,上海200011

出　　处：《计算机安全》2013年第5期39-42,共4页Network & Computer Security

摘　　要：随着云计算的进一步推进和发展,云计算面临的安全问题变得越来越突出,特别是在云计算带来的诸多利益下,如何满足用户在云计算环境下对用户数据的机密性、完整性等相关性能的需求,已成为云计算安全的首要难题;从云计算应用安全和系统安全两个层面,依据等级保护策略在信息系统中的策略要求,提出了云计算安全中应用安全和系统安全的威胁所在以及相应的基本保护要求,为进一步推进云计算安全走向成熟。With cloud computing to further promote and develop,the security problems faced by cloud computing is becoming more and more prominent,in particular,under the benefits of cloud computing,how to satisfy user requirement about the confidentiality and integrality of user data,and correlative capability in the cloud computing environment,and become the primary security problem of cloud computing;This article from the two levels of applications security and system security of cloud computing,in accordance with the policy requirements of the level protection strategy in the information system,Proposed the locality of threat to application security and system security and protection requirements to these threats,order to further advance cloud computing security maturing.

关 键 词：云计算 等级保护 应用安全 系统安全 风险评估 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]