OpenStack对象存储身份和访问控制管理的安全性分析与改进  

Security Analysis and Improvement of Open Stack Object Store Identity and Access Management

作　　者：魏兴伟 

机构地区：[1]北京邮电大学网络技术研究院,北京100876

出　　处：《软件》2015年第2期36-38,共3页Software

基　　金：中央高校基本科研业务费专项资金资助(编号:2012RC0612)

摘　　要：随着云计算技术的蓬勃发展,Open Stack作为"云"家族中的新兴成员正在逐步成为该领域的核心技术。作为公有云和私有云的共同技术基础,Open Stack不但可以提供基础平台层的服务,而且能够实现统一的云管理平台自动化。然而,Open Stack作为一种新型的、动态的云服务,目前在安全性方面仍不完善。本文重点对Open Stack的对象存储进行安全性分析,发现Open Stack对象存储中身份认证、访问管理两个方面存在安全隐患。针对这些安全问题,本文提出相应的改进方案,提高了Open Stack对象存储的安全等级,为用户提供更为安全的平台服务。With the booming development of cloud computing technology, OpenStack as a new platform in the range of cloud management is gradually becoming the core technology, which provides a common technical basis for public and private cloud. It can not only friendly provide a base platform layer service, but also uniformly achieve an auto-mated cloud management platform. However, there still exist several weaknesses in the aspect of security due to its dy-namic nature of the emerging OpenStack. In this paper, we focus on the research of OpenStack Object Storage, and find out some security risks in the modules of authentication and access management of OpenStack Object Storage. In order to solve these security problems, this paper puts forward the corresponding improved schemes. These improvements can enhance the safety level of OpenStack Object Storage, and provide users with a more secure service platform.

关 键 词：云计算 OPEN STACK 对象存储 安全性 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]