基于等级保护的云计算安全防护体系研究  

Cloud Computing Security Framework Based on Classified Protection

作　　者：陈雪秀[1] 于晶[2] 陈驰[2] 任卫红[1] 

机构地区：[1]公安部第三研究所,公安部信息安全等级保护评估中心,北京市海淀区阜成路58号100142 [2]中国科学院信息工程研究所

出　　处：《中国数字医学》2014年第11期44-47,共4页China Digital Medicine

基　　金：发改高技【2012】1615号(编号:XDA06010701)~~

摘　　要：云计算打破了信息系统的边界,使得以边界防护为核心的传统信息安全防护体系不再适用,云安全问题成为制约云计算技术发展的关键因素之一。研究使用蛛网图法与德尔菲法相结合的方式,对云计算信息系统面临的威胁和风险场景进行分析,明确了云计算系统的保护对象;并基于我国信息安全等级保护技术,提出基于保护对象的云安全防护体系框架;进一步根据云计算信息系统特点,采用德尔菲法构建了云安全防护指标体系:同时结合不同等级信息系统安全防护能力要求,对防护指标体系进行了分级。Cloud computing break the boundary of information systems, the traditional information security protection system to the boundary protection as the core is no longer suitable, Security is one of the key factors restricting the development of cloud computing technology. In order to guarantee the security of cloud computing information system and carry out the classified protection on cloud computing, the paper analysis the threats and risk scenarios which the cloud computing is faced, through the Spider Diagram method and Delphi method, based on the classified protection in our country. In addition, the paper defined the protected object of cloud computing information system, and build cloud-based security protection system. The last, the paper built cloud computing security indicator system in accordance with the characteristics of cloud computing information systems using Delphi method, and the security indicators were graded up. In the meanwhile, combined with protection capabilities requirements of classified information system,this paper establishes the cloud security indicators system of different classifies.

关 键 词：云安全 等级保护 云计算 防护指标体系 

分 类 号：TP309.2[自动化与计算机技术—计算机系统结构]