云安全风险评估度量模型  

Metric model for cloud computing security risk assessment

作　　者：阮树骅 瓮俊昊[2] 毛麾 陈雪莲 RUAN Shu-hua1,2, WENG Jun-hao2 , MAO Hui2, CHEN Xue-lian2(1. Cybersecurity Research Institute, Sichuan University, Chengdu 610065, Sichuan, China; 2. College of Computer Science, Sichuan University, Chengdu 610065, Sichuan, Chin)

机构地区：[1]四川大学网络空间安全研究院,四川成都610065 [2]四川大学计算机学院,四川成都610065

出　　处：《山东大学学报（理学版）》2018年第3期71-76,81,共7页Journal of Shandong University(Natural Science)

基　　金：四川省政府办公厅信息技术中心资助项目(16H1149);AWS2017合作项目

摘　　要：针对云计算环境下安全风险评估问题,从与云计算相关的政策法规、管理和技术三个层面出发,建立云安全风险评估指标体系。融合德尔菲法、模糊层次分析法、模糊综合评价法构建云计算环境下安全风险评估度量模型。风险实例评估度量结果表明该度量模型对于云计算环境下的安全风险评估能提供有效的量化评价依据。From three aspects related to cloud computing of policies,management and technologies,an indicator system of cloud security risk assessment is established for the security risk assessment problem in cloud computing environment. A metric model of security risk in cloud computing environment is established by fusing Delphi method,fuzzy analytical hierarchy process and fuzzy comprehensive evaluation method. Measurement results of risk instances showthat the metric model could provide effective quantitative evaluation for the security risk assessment in cloud computing environment.

关 键 词：云安全 风险评估 度量模型 

分 类 号：TP309[自动化与计算机技术—计算机系统结构]