多源异构数据的云平台安全态势评估系统  

The Assessment System of Cloud Platform Security Situation Based on Multi-source Heterogeneous Data

作　　者：王贞灵 薛锐[1] 陈驰[1,2] 田雪[1] 顾广宇[3] 

机构地区：[1]中国科学院信息工程研究所信息安全国家重点实验室,北京100093 [2]中国科学院大学网络空间安全学院,北京100049 [3]国网安徽省电力公司电力科学研究院,合肥230601

出　　处：《网络新媒体技术》2017年第3期8-13,共6页Network New Media Technology

基　　金：中国科学院先导专项"面向感知中国的新一代信息技术研究"(No.XDA06040601);新疆维吾尔自治区科技计划项目(No.201230121);国家电网科技合作项目(No.SGAHDK00YJJS1600031)

摘　　要：针对云平台的安全性问题,为提高系统管理员对云平台整体的安全态势感知能力,增强对云平台的可控性,本文首次设计了一种面向多源异构数据的云平台安全态势量化评估系统。对已有的安全态势评估方法进行了分析比较,针对云平台安全中多数据源的特点,提出基于云计算安全性指标体系的多源异构数据融合方法。利用大数据处理工具,对云平台的多源异构数据进行各保护层面态势指标融合和保护层面态势融合,得到整体的安全态势。本文运用该系统对所搭建的openstack云平台进行评估,实验结果表明该系统能够准确实时地反映云平台的安全态势。Aiming at the security issues existing in cloud platform,this paper designed a quantitative assessment system for cloud platform security situation for the first time,to improve administrator＇s security situational awareness of the whole cloud platform,and make the cloud platform more controllable. The existing security situational assessment methods are analyzed and compared in detail,in view of the multi-source information in cloud platform security,a new method to fuse multi-source heterogeneous data based on the cloud computing security indicator system is proposed. Using big data processing tools,the security situation values of each protection levels are got through situational indicators fusion and the security situation value of cloud platform is calculated by protection levels situation fusion. In the end,the cloud platform security situation assessment result is obtained. In this paper,the system is used to assess the openstack cloud platform,the results show that the system can accurately reflect the security situation of cloud platform in real time.

关 键 词：云平台安全 态势评估 多源异构数据 指标体系 数据融合 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]