私有云环境下安全审计系统的设计与实现  

Design and implementation of security audit system for private cloud environment

作　　者：包捷[1,2] 吕智慧[1,2] 华锦芝[3] 张凌毅[3] 吴承荣[1,2] 

机构地区：[1]复旦大学计算机科学技术学院,上海200433 [2]网络信息安全审计与监控教育部工程研究中心,上海200433 [3]中国银联电子支付研究院,上海201201

出　　处：《计算机工程与设计》2014年第11期3708-3711,3729,共5页Computer Engineering and Design

基　　金：国家云计算示范工程基金项目(C73623989020220110006)

摘　　要：为提高数据在私有云环境下的安全性,提供对于数据泄露等风险的及时检测和响应机制。根据私有云数据中心的具体架构,分析云生产环境中的安全弱点,结合虚拟化、分布式系统、网络及日志审计等技术,设计一套具有针对性的云审计系统。通过实际系统的实现和测试验证了该系统能够满足云计算安全风险评估模型提出的需求,可以实现保障私有云环境下各类应用安全的目标。To improve the safety of data in the private cloud and provide the detection and response method for risks including da- ta leakages, according to the system architecture of the private cloud data center and the analysis of safety weaknesses in the cloud environment, a targeted cloud audit system was proposed, which contains techniques of the virtualization, the distributed system, the network and log auditing. The system actual measurement was done to prove that the cloud audit system can meet the demand of cloud computing risk assessment scheme. It can achieve the goal of ensuring the safety of applications in the private cloud.

关 键 词：云计算 数据中心 安全审计 网络审计 日志审计 私有云 

分 类 号：TP393.08[自动化与计算机技术—计算机应用技术]