云计算中的信息安全风险评估  

Information Security Risk Assessment of Cloud Computing

作　　者：王希忠[1] 马遥 

机构地区：[1]黑龙江省电子信息产品监督检验院,黑龙江哈尔滨150090

出　　处：《计算机安全》2014年第9期37-40,共4页Network & Computer Security

摘　　要：云计算具有快速灵活、随需求而变、按使用付费、可扩展能力强等特点,其应用愈来愈广泛,如何评价云计算服务的安全风险是信息安全领域面临的新问题。由于云计算服务具有传统意义上的信息系统特点,结合云计算架构的三个服务层次:基础设施即服务、平台即服务和软件即服务。以信息系统安全风险评估的规范性动作为基本流程,从客户端和服务端两个角度,对如何实施信息安全风险评估加以阐述,为人们分析云计算服务中可能存在的安全风险和评价云计算的安全性提供参考。Cloud computing has the characteristics of fast and flexible, with the demand change, pay per use, strong extensible ability, and its application is increasingly extensive, how to evaluate the security risks of cloud computing services is a new problem in the field of information security. Because cloud computing service has the characteristics of information systems in the traditional sense, the three service levels with cloud computing architecture： infrastructure as a service, platform as a service and software as a service, based on the information system security risk assessment of normative action as the basic process, from two angles of the client and the server, how to implement the information security risk assessment are introduced, providing reference of safety risk and evaluate the cloud computing services may exist in the calculation of the people for the analysis of cloud.

关 键 词：云计算 信息安全 风险评估 

分 类 号：TP309.1[自动化与计算机技术—计算机系统结构]